Hi, I am looking at a trace to monitor a TCP/IP connection over GPRS and I am noticing that I see two consecutive SYN messages (with a difference of a couple of seconds) everytime there is a connection attempt. I notice that in these 2 SYN messages the source port is always the same, and there is nothing wrong at checksum level. I don't think this is being done at application level. Can you help me to understand this behavior? I can post here the 2 frames if it helps. Best regards asked 26 Aug '13, 04:38 cpzao |
One Answer:
That's (most certainly) the TCP retry algorithm if there is no answer to the first SYN packet. Typical reasons for a missing SYN-ACK:
The best way to figure out what's going on is to capture near (or on) the client and the server and then compare the capture files to figure out which packet (SYN or SYN-ACK) get lost at what point in the path. Regards answered 26 Aug '13, 05:59 Kurt Knochner ♦ |
Could this be related to routing issues?