 | 1 | initial version |
Yes you are right there is a delay of around 4.4 seconds in the trace. The gap is directly after the 3 way handshake. We see this delay only on the client side. Further I can spot that the initial SYN arrives at the server around 4 seconds later. Also I see the use of different IP Addresses in the traces (NAT). So my assumption is that one device in the middle (e.g. Firewall, Loadbalancer) is responsible for the delay
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.
