 | 1 | initial version |
Most remarkably, the slow transfer file shows quite a number of retransmissions, where the fast transfer does not show so many. I have plotted the number of packets send by the server vs. the retransmissions (in red).
It's interesting to see, that the time interval of 44 sec onwards has ACK-times of up to 2 seconds. Try the display filter tcp.analysis.ack_rtt > 1 for fun.
The server has a constant TTL of 124. Is it possible, that a topology change has happened in the WAN or in a carrier network (SD-WAN or whatever)? Or a failover on L2 somewhere? A failover from one WAN-link to another?
@SYN-bit could buffer bloat cause these looong RTTs?
