Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

There appears to be a middle box somewhere between the two systems messing with some of the TCP options and perhaps dropping certain packets.

From the limited info available from the two packetlist snapshots we can see that the initial SYN sent by the client (frame 1) had a length of 76 but when received by the server (frame 576) had a length of 74. The client advertised support for SACK but the option appears to be missing when the packet arrives at the server.

The server sent its SYN/ACK packet (frame 577) advertising MSS of 1460. But when this packet was received by the client (frame 2) the MSS value has been reduced to 1300.

The server sent its RemoteCreateInstance response as frame 594 (length 1030) which was apparently never made it to the client. I would look for a middle box as the likely source for this packet loss.