I have an issue with a client who has a server hosted with a third party provider. They have recently have their server moved (still within the same company) as they needed the server to be under their own account and not their old IT providers' account. Ever since the migration, the customer cannot access Hotmail. I have tried Gmail and AOL and a bunch of other HTTPS sites but for some reason I can only find an issue with them accessing Hotmail. What is happening is when they go to Hotmail, they are redirected to login.live.com (as you'd expect) but accessing the page is intermittent and so far I have not been able to log in successfully once. I have ran Wireshark and followed the TCP stream for this particular conversation but I am unsure what the output actually means. I see we get a packet that says [TCP Retransmission] and then after that the connection is reset.
Any help on this would be fantastic please.
asked 22 Jun '15, 10:22
edited 23 Jun '15, 12:03
Thanks for your response. It turns out that the server NIC had TCP offloading enabled which was causing the issues. Disabling this resolved the issue immediately. Very odd! Thanks for your help anyway.
answered 24 Jun '15, 03:57
Your screenshot shows a HTTPS session to the IP 126.96.36.199, which is one of the IPs of login.live.com, so at least you are talking to the right server. However, the problem with your capture file is, that there is (most certainly) TCP segment offloading enabled on the server (frames > 1500 bytes), which makes it hard to do any TCP sequence analysis, especially based on a screenshot.
What do you mean by that? You enter the user credentials, and then page loading stalls, or do you get an error message?
If it's an error message: What's the message?
If that page stalls, my best guess would be that there is some kind of security software on that system (AV, Endpoint Security, etc.) that hooks itself into the data stream to scan internet downloads and something goes wrong. Please check that and disable any security software for another test with Hotmail.
answered 22 Jun '15, 16:37
Kurt Knochner ♦