Clients on the network are complaining that a lot of the time, when they try to open a web page, their browser times out. Usually, if they hit refresh, the page will load. I've performed speed tests, ping tests, and DNS tests. They all come back good. I downloaded wireshark and ran a trace while trying access the Internet. I get a lot of TCP Dup ACK and TCP Retransmissions. The trace file can be found at http://pcc-tech.com/wireshark/file3.pcapng Any ideas? |
The trace shows a lot of SYN retransmissions that would show up as a connection timeout in the browser. The duplicate acknowlegdements are due to out_of_order arrival or packet loss I've tried two different routers. Although I haven't run a trace using the second router, the users get the same symptoms.
(12 Jun '15, 04:07)
Tim Sanders
Then you should be talking to your OfficeScan administrators and have them check the logs. If that doesn't show anything suspicious you will need to start tracing in the router to see if the SYN requests made it into the WAN.
(12 Jun '15, 05:39)
mrEEde
|