https://www.cloudshark.org/captures/14bcc5d9a146 In the above link, i have a capture of a client access a server, and i am seeing retransmissions. I check the network and the port that the user is connected to, but there are no errors on the port or the network to the server, but the pattern of the retransmission all begin up at a file that the client cannot find, so it retransmit for the file, needless to say, the user connection to the email server is slow and access to other server are slow. Can one or you very smart people look at the trace and give me some advice, I have tried everything I know to figure this out, trying to give the and answer Thanks in advance blessing P.S the trace was taken on th client computer if that helps. there are some zero windows, I am sure that plays a part in it also. asked 21 Aug '13, 20:42  ejohnson7 |
One Answer:
This trace contains duplicate packets. You need to remove those to get rid of the false alarms. answered 21 Aug '13, 21:53  mrEEde |
This trace contains duplicate packets how do i get rid of the false alarms?
editcap -d wireshark-plugin-s3pc.2.cap s3pc.nodups.cap
where is this added to the Wireshark Dir
See Help -> About Wireshark -> Folders -> Program
If you are running Windows you should add this directory to the PATH Environment Variable