seeing a weird issue when trying to access a webserver 10.100.20.175 from my local PC 10.100.21.157
as you can see from the packet capture everything looks normal till no 9 , after which i start seeing a whole bunch of arp requests and the webpage on 10.100.20.175 never loads
asked 15 Oct '14, 08:01
edited 20 Oct '14, 03:03
Well, that's no broadcast storm for sure: look at the amount of time that passes between frames. Broadcast storms are thousands of packets per second (or at least hundreds). What you've got there looks pretty normal.
Is the problem consistent? Do you always get the lost segment at the beginning? For some reason one of the segments from the web server is missing and it doesn't appear to retransmit it (or at least Wireshark doesn't see the retransmission). I suppose it's possible the TCP stack over there is broken but I'd think it's more likely some firewall software or something is interfering.
answered 20 Oct '14, 03:02