Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

asked 2021-03-31 11:35:36 +0000

bb25 gravatar image

SMB and TCP packets - TCP retransmissions

Hi,

I'm looking for some help on analysis some packets.

The pcap i have consists of TCP and SMB packets.

From the IO graph, I have shown TCP errors (which are showing as retransmissions) and all SMB packets.

I have noticed form the graph that when there are any TCP errors, the SMB packet numbers lower drastically:

https://ibb.co/3184Vtm

^this is an image of my graph.

If anyone could help to explain why this is or why the retransmissions are occuring id appreciate it.

click to hide/show revision 2
None

updated 2021-03-31 11:49:38 +0000

grahamb gravatar image

SMB and TCP packets - TCP retransmissions

Hi,

I'm looking for some help on analysis some packets.

The pcap i have consists of TCP and SMB packets.

From the IO graph, I have shown TCP errors (which are showing as retransmissions) and all SMB packets.

I have noticed form the graph that when there are any TCP errors, the SMB packet numbers lower drastically:

https://ibb.co/3184Vtm

^this is an image of my graph.

If anyone could help to explain why this is or why the retransmissions are occuring id appreciate it.