Hello Friends, My task is to find out why one trace is slow.
https://drive.google.com/open?id=1DBQP_OxUxnp45uaHa0REbK4znupVs0oT --->slow https://drive.google.com/open?id=1w__DGZUtosFEC1AKaYBZjRSvjeJa5phZ --->fast
Both the capture is made near the server via TAPs.
From my findings the slow transfer is slow because of the nature of the application. The application sends some data to sever and the server only answers after resumption of this application data. Both the traces have the same pattern of packet flow in the sense that the server waits still the client sends some data. As the RTT of the slow transfer is high the total duration is longer. Can anyone find some other reason for this?
I could calculate the slow transfer took 12 seconds as there are 253 packets send by the client which took the time equal or grater than to RTT which is 2530ms. There are 2 packets sent after the re transmission time out which is took 3041 ms. Thus the network time spend by the slow transfer is 5571ms. The time which the server took till the capture point is not taken into account. Did i miss something?