Wireshark · Ethereal-users: Re: [Ethereal-users] Re: Things Happening In The Same Timestamp

[Becky Vict <becky_vict@xxxxxxxxx>]

I'm sorry for the mistake in email which I sent through my mate's add (I'm using her laptop). She is also an ethereal member and just so happen was opening mails.

That aside, thank you for your input. 

By flow control, do you mean TCP congestion windows at the server/client? 

I set Window size to be 64kB for both. The server is quite slow, Pentium III and the client is Pentium M 1.73Ghz. I have info saying that Window size is somehow affected by how fast is our machine? 

What is packet shaping? I am sorry to ask because I'm not familiar with that term. How to do packet shaping?

Thanks.

BV
ronnie sahlberg <ronniesahlberg@xxxxxxxxx> wrote:

i could not find any duplicate packets in that trace so you dont
have that particular issue.


you do have a serious issue with packetloss and tcp retransmissions though.

(select one of the retransmissions and select
Statistics/tcpstreamgraph/stevens...
see the almost parallell lines when the sequence number is increasing?


this looks like what you have if you
1, have a duplex mismatch
or
2, multilink but one link is silently dead
or
3, you push a slow slow serial link such as gprs too hard


If 3 is the case maybe you can enable some sort of flow control or
packetshaping to reduce the pace at which you send data to eliminate
overdriving the link and causing frameloss?







On 6/7/06, Muzalina Zakaria wrote:
> Hi,
>
> I have Zone Alarm (free version) on both server and client. All settings are
> ok.
>
> On server, the network card is D-Link DFE-538TX 10/100 adapter and appeared
> to be in the latest driver version for this particular model. It is
> connected to ADSL modem.
>
> On client, USB port.
>
> If the captures were captured twice, I should be seeing 'double packets'
> from the same source/direction with different timestamps?
>
> Please take a look at my sample capture here:
>
> www.darikawan.com
>
> at the bottom left corner Download Here section. I hope this is acceptable
> to ethereal community? I cannot put the sample in the server because this is
> a private server.
>
> Thanks.
>
> BV
>
> ronnie sahlberg wrote: please check if you have a
> firewall software installed on the box you are capturing from.
>
> Some people has seen interaction between for example blackice and winpcap
> causing the captures to be captured "twice" for some mysterious reason.
>
>
>
>
> On 6/7/06, Becky Vict wrote: Hello there,
>
> Thanks for your tip. I will look into my hardware versions and firewall
> setting.
>
> Could it be possible that the problem come from the 'internet cloud' between
> my server and client?
>
> Do you have the thread of the earlier discussion on this or the topic (I
> can search ethereal archive)?
>
> Thanks.
>
> BV
>
>
> Andrew Hood < ajhood@xxxxxxxxx> wrote: Becky Vict wrote:
> > Hello ethereal community.
> >
> > I need help in explaining the capture I get. I'm downloading a file from
> > an FTP server and I'm noticing a weird thing which is - in the exact
> > same timestamp I get data packet transmission from server and a dupack
> > from client. In another instance, out-of-order from server is followed
> > by dupack from client also in the same timestamp. And another instance
> > which is even worse, TCP segment lost is followed by dupack and then
> > retransmission all happening in the same timestamp
> > (server-client-server). Even TCP window update comes in two, coming
> > twice from client in the same timestamp (is this duplicated packet?)
> >
> > How is this possible? Is there something wrong?
> >
> > I'm using ethereal V 0.10.13 and winpcap 3.1.
> > OS is XP Pro SP 1 both client and server.
> >
> > I hope I have given a clear picture of my problem.
> >
> > Thank you in advance.
>
> This was discussed at length some time back. It might help if you said
> what hardware you are using.
>
> You are almost certainly seeing an interaction between parts of the
> network stack causing packets to go past the point where winpcap
> collects them twice.
>
> Check you have the latest version of the driver for your network card.
> That fixed it for me. (ThinkPad T40, Intel PRO/1000 MT)
>
> It may also be caused by Windows firewall/connection sharing. Fiddling
> wiht that fixed it for some others.
>
> --
> There's no point in being grown up if you can't be childish sometimes.
> -- Dr. Who
>
>
>
>
> ---------------------------------
> Yahoo! Sports Fantasy Football '06 - Go with the leader. Start your league
> today!
>
>
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
>
>
>
>
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
>
>
> __________________________________________________
> Do You Yahoo!?
> Tired of spam? Yahoo! Mail has the best spam protection around
> http://mail.yahoo.com
>
_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users

---

Talk is cheap. Use Yahoo! Messenger to make PC-to-Phone calls.  Great rates starting at 1¢/min.
_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users