Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

loads of TCP Retransmission, TCP Out-Of-Order, TCP Dups

Hi, Having an issue trying to sort out why Im getting smashed with TCP Retransmission, TCP Out-Of-Order, TCP Dups. Also seeing loads of NBSS Continuation Message. This has been stripped down to 2 laptops and a switch and router - Router on a stick. ZBWL disabled. Host Firewalls not blocking. Just a file copy between 2 laptops on the different VLANs. Have tried a pacp with 2 laptops on same VLAN and just the Switch, still loads of black packets. MTUs in this simple (cutdown) setup are 1500--Pcap has 1500+14 ethernet header.

Any info on how I need to start to work my way through this please? Thanks

501771  52.701934    10.2.55.11  10.2.20.11 TCP 1514    501771  66359   309815355   309816815   [TCP Retransmission] 60422 → 445 [ACK] Seq=309815355 Ack=66359 Win=2101760 Len=1460
501772  52.702037    10.2.20.11  10.2.55.11 TCP 60  501772  309813895   66359   66359   445 → 60422 [ACK] Seq=66359 Ack=309813895 Win=2102272 Len=0
501773  52.702170    10.2.20.11  10.2.55.11 TCP 60  501773  309816815   66359   66359   445 → 60422 [ACK] Seq=66359 Ack=309816815 Win=2102272 Len=0
501774  52.703239    10.2.55.11  10.2.20.11 TCP 1514    501774  66359   309816815   309818275   [TCP Retransmission] 60422 → 445 [ACK] Seq=309816815 Ack=66359 Win=2101760 Len=1460
501775  52.703239    10.2.55.11  10.2.20.11 TCP 1514    501775  66359   309818275   309819735   [TCP Retransmission] 60422 → 445 [ACK] Seq=309818275 Ack=66359 Win=2101760 Len=1460
501776  52.703239    10.2.55.11  10.2.20.11 TCP 1514    501776  66359   309819735   309821195   [TCP Retransmission] 60422 → 445 [ACK] Seq=309819735 Ack=66359 Win=2101760 Len=1460
501777  52.703380    10.2.55.11  10.2.20.11 TCP 1514    501777  66359   309821195   309822655   [TCP Retransmission] 60422 → 445 [ACK] Seq=309821195 Ack=66359 Win=2101760 Len=1460
501778  52.703380    10.2.55.11  10.2.20.11 TCP 1514    501778  66359   309822655   309824115   [TCP Retransmission] 60422 → 445 [ACK] Seq=309822655 Ack=66359 Win=2101760 Len=1460
501779  52.703380    10.2.55.11  10.2.20.11 TCP 1514    501779  66359   309824115   309825575   [TCP Retransmission] 60422 → 445 [ACK] Seq=309824115 Ack=66359 Win=2101760 Len=1460
501780  52.703380    10.2.55.11  10.2.20.11 TCP 1514    501780  66359   309825575   309827035   [TCP Retransmission] 60422 → 445 [ACK] Seq=309825575 Ack=66359 Win=2101760 Len=1460
501781  52.703380    10.2.55.11  10.2.20.11 TCP 1514    501781  66359   309827035   309828495   [TCP Retransmission] 60422 → 445 [ACK] Seq=309827035 Ack=66359 Win=2101760 Len=1460
501782  52.703388    10.2.20.11  10.2.55.11 TCP 60  501782  309822655   66359   66359   445 → 60422 [ACK] Seq=66359 Ack=309822655 Win=2102272 Len=0
501783  52.703539    10.2.20.11  10.2.55.11 TCP 60  501783  309827035   66359   66359   445 → 60422 [ACK] Seq=66359 Ack=309827035 Win=2102272 Len=0
501784  52.703718    10.2.55.11  10.2.20.11 TCP 1514    501784  66359   309828495   309829955   [TCP Retransmission] 60422 → 445 [ACK] Seq=309828495 Ack=66359 Win=2101760 Len=1460
501785  52.703718    10.2.55.11  10.2.20.11 TCP 1514    501785  66359   309829955   309831415   [TCP Retransmission] 60422 → 445 [ACK] Seq=309829955 Ack=66359 Win=2101760 Len=1460
501786  52.703718    10.2.55.11  10.2.20.11 TCP 1514    501786  66359   309831415   309832875   [TCP Retransmission] 60422 → 445 [ACK] Seq=309831415 Ack=66359 Win=2101760 Len=1460
501787  52.703858    10.2.55.11  10.2.20.11 TCP 1514    501787  66359   309832875   309834335   [TCP Retransmission] 60422 → 445 [ACK] Seq=309832875 Ack=66359 Win=2101760 Len=1460
501788  52.703858    10.2.55.11  10.2.20.11 TCP 1514    501788  66359   309834335   309835795   [TCP Retransmission] 60422 → 445 [ACK] Seq=309834335 Ack=66359 Win=2101760 Len=1460
501789  52.703858    10.2.55.11  10.2.20.11 TCP 1514    501789  66359   309835795   309837255   [TCP Retransmission] 60422 → 445 [ACK] Seq=309835795 Ack=66359 Win=2101760 Len=1460
501790  52.703858    10.2.55.11  10.2.20.11 TCP 1514    501790  66359   309837255   309838715   [TCP Retransmission] 60422 → 445 [ACK] Seq=309837255 Ack=66359 Win=2101760 Len=1460
501791  52.703858    10.2.55.11  10.2.20.11 TCP 1514    501791  66359   309838715   309840175   [TCP Retransmission] 60422 → 445 [ACK] Seq=309838715 Ack=66359 Win=2101760 Len=1460
501792  52.703989    10.2.20.11  10.2.55.11 TCP 60  501792  309752575   66359   66359   445 → 60422 [ACK] Seq=66359 Ack=309752575 Win=2102272 Len=0
501793  52.703989    10.2.20.11  10.2.55.11 TCP 60  501793  309837255   66359   66359   445 → 60422 [ACK] Seq=66359 Ack=309837255 Win=2102272 Len=0
501794  52.704020    10.2.20.11  10.2.55.11 TCP 60  501794  309840175   66359   66359   445 → 60422 [ACK] Seq=66359 Ack=309840175 Win=2102272 Len=0
501795  52.704228    10.2.55.11  10.2.20.11 TCP 1514    501795  66359   309878135   309879595   60422 → 445 [ACK] Seq=309878135 Ack=66359 Win=2101760 Len=1460 [TCP segment of a reassembled PDU]
501796  52.704372    10.2.55.11  10.2.20.11 TCP 1514    501796  66359   309879595   309881055   60422 → 445 [ACK] Seq=309879595 Ack=66359 Win=2101760 Len=1460 [TCP segment of a reassembled PDU]
501797  52.704372    10.2.55.11  10.2.20.11 TCP 1514    501797  66359   309881055   309882515   60422 → 445 [ACK] Seq=309881055 Ack=66359 Win=2101760 Len=1460 [TCP segment of a reassembled PDU]
501798  52.704372    10.2.55.11  10.2.20.11 TCP 1514    501798  66359   309882515   309883975   60422 → 445 [ACK] Seq=309882515 Ack=66359 Win=2101760 Len=1460 [TCP segment of a reassembled PDU]
501799  52.704372    10.2.55.11  10.2.20.11 TCP 1514    501799  66359   309883975   309885435   60422 → 445 [ACK] Seq=309883975 Ack=66359 Win=2101760 Len=1460 [TCP segment of a reassembled PDU]
501800  52.705001    10.2.55.11  10.2.20.11 TCP 1514    501800  66359   309840175   309841635   [TCP Out-Of-Order] 60422 → 445 [ACK] Seq=309840175 Ack=66359 Win=2101760 Len=1460 [TCP segment of a reassembled PDU]
501801  52.705001    10.2.55.11  10.2.20.11 TCP 1514    501801  66359   309841635   309843095   [TCP Out-Of-Order] 60422 → 445 [ACK] Seq=309841635 Ack=66359 Win=2101760 Len=1460 [TCP segment of a reassembled PDU]
501802  52.705001    10.2.55.11  10.2.20.11 TCP 1514    501802  66359   309843095   309844555   [TCP Out-Of-Order] 60422 → 445 [ACK] Seq=309843095 Ack=66359 Win=2101760 Len=1460 [TCP segment of a reassembled PDU]
501803  52.705025    10.2.20.11  10.2.55.11 TCP 60  501803  309756955   66359   66359   445 → 60422 [ACK] Seq=66359 Ack=309756955 Win=2102272 Len=0
501804  52.705140    10.2.55.11  10.2.20.11 TCP 1514    501804  66359   309844555   309846015   [TCP Out-Of-Order] 60422 → 445 [ACK] Seq=309844555 Ack=66359 Win=2101760 Len=1460 [TCP segment of a reassembled PDU]
501805  52.705140    10.2.55.11  10.2.20.11 TCP 1514    501805  66359   309846015   309847475   [TCP Out-Of-Order] 60422 → 445 [ACK] Seq=309846015 Ack=66359 Win=2101760 Len=1460 [TCP segment of a reassembled PDU]
501806  52.705140    10.2.55.11  10.2.20.11 TCP 1514    501806  66359   309847475   309848935   [TCP Out-Of-Order] 60422 → 445 [ACK] Seq=309847475 Ack=66359 Win=2101760 Len=1460 [TCP segment of a reassembled PDU]
501807  52.705140    10.2.55.11  10.2.20.11 TCP 1514    501807  66359   309848935   309850395   [TCP Out-Of-Order] 60422 → 445 [ACK] Seq=309848935 Ack=66359 Win=2101760 Len=1460 [TCP segment of a reassembled PDU]
501808  52.705140    10.2.55.11  10.2.20.11 TCP 1514    501808  66359   309850395   309851855   [TCP Out-Of-Order] 60422 → 445 [ACK] Seq=309850395 Ack=66359 Win=2101760 Len=1460 [TCP segment of a reassembled PDU]
501809  52.705369    10.2.20.11  10.2.55.11 TCP 60  501809  309847475   66359   66359   445 → 60422 [ACK] Seq=66359 Ack=309847475 Win=2102272 Len=0
501810  52.705369    10.2.20.11  10.2.55.11 TCP 60  501810  309851855   66359   66359   445 → 60422 [ACK] Seq=66359 Ack=309851855 Win=2102272 Len=0

loads of TCP Retransmission, TCP Out-Of-Order, TCP Dups

Hi, Having an issue trying to sort out why Im getting smashed with TCP Retransmission, TCP Out-Of-Order, TCP Dups. Also seeing loads of NBSS Continuation Message. This has been stripped down to 2 laptops and a switch and router - Router on a stick. ZBWL disabled. Host Firewalls not blocking. Just a file copy between 2 laptops on the different VLANs. Have tried a pacp with 2 laptops on same VLAN and just the Switch, still loads of black packets. MTUs in this simple (cutdown) setup are 1500--Pcap has 1500+14 ethernet header.

Any info on how I need to start to work my way through this please? Thanks

image description

501771  52.701934    10.2.55.11  10.2.20.11 TCP 1514    501771  66359   309815355   309816815   [TCP Retransmission] 60422 → 445 [ACK] Seq=309815355 Ack=66359 Win=2101760 Len=1460
501772  52.702037    10.2.20.11  10.2.55.11 TCP 60  501772  309813895   66359   66359   445 → 60422 [ACK] Seq=66359 Ack=309813895 Win=2102272 Len=0
501773  52.702170    10.2.20.11  10.2.55.11 TCP 60  501773  309816815   66359   66359   445 → 60422 [ACK] Seq=66359 Ack=309816815 Win=2102272 Len=0
501774  52.703239    10.2.55.11  10.2.20.11 TCP 1514    501774  66359   309816815   309818275   [TCP Retransmission] 60422 → 445 [ACK] Seq=309816815 Ack=66359 Win=2101760 Len=1460
501775  52.703239    10.2.55.11  10.2.20.11 TCP 1514    501775  66359   309818275   309819735   [TCP Retransmission] 60422 → 445 [ACK] Seq=309818275 Ack=66359 Win=2101760 Len=1460
501776  52.703239    10.2.55.11  10.2.20.11 TCP 1514    501776  66359   309819735   309821195   [TCP Retransmission] 60422 → 445 [ACK] Seq=309819735 Ack=66359 Win=2101760 Len=1460
501777  52.703380    10.2.55.11  10.2.20.11 TCP 1514    501777  66359   309821195   309822655   [TCP Retransmission] 60422 → 445 [ACK] Seq=309821195 Ack=66359 Win=2101760 Len=1460
501778  52.703380    10.2.55.11  10.2.20.11 TCP 1514    501778  66359   309822655   309824115   [TCP Retransmission] 60422 → 445 [ACK] Seq=309822655 Ack=66359 Win=2101760 Len=1460
501779  52.703380    10.2.55.11  10.2.20.11 TCP 1514    501779  66359   309824115   309825575   [TCP Retransmission] 60422 → 445 [ACK] Seq=309824115 Ack=66359 Win=2101760 Len=1460
501780  52.703380    10.2.55.11  10.2.20.11 TCP 1514    501780  66359   309825575   309827035   [TCP Retransmission] 60422 → 445 [ACK] Seq=309825575 Ack=66359 Win=2101760 Len=1460
501781  52.703380    10.2.55.11  10.2.20.11 TCP 1514    501781  66359   309827035   309828495   [TCP Retransmission] 60422 → 445 [ACK] Seq=309827035 Ack=66359 Win=2101760 Len=1460
501782  52.703388    10.2.20.11  10.2.55.11 TCP 60  501782  309822655   66359   66359   445 → 60422 [ACK] Seq=66359 Ack=309822655 Win=2102272 Len=0
501783  52.703539    10.2.20.11  10.2.55.11 TCP 60  501783  309827035   66359   66359   445 → 60422 [ACK] Seq=66359 Ack=309827035 Win=2102272 Len=0
501784  52.703718    10.2.55.11  10.2.20.11 TCP 1514    501784  66359   309828495   309829955   [TCP Retransmission] 60422 → 445 [ACK] Seq=309828495 Ack=66359 Win=2101760 Len=1460
501785  52.703718    10.2.55.11  10.2.20.11 TCP 1514    501785  66359   309829955   309831415   [TCP Retransmission] 60422 → 445 [ACK] Seq=309829955 Ack=66359 Win=2101760 Len=1460
501786  52.703718    10.2.55.11  10.2.20.11 TCP 1514    501786  66359   309831415   309832875   [TCP Retransmission] 60422 → 445 [ACK] Seq=309831415 Ack=66359 Win=2101760 Len=1460
501787  52.703858    10.2.55.11  10.2.20.11 TCP 1514    501787  66359   309832875   309834335   [TCP Retransmission] 60422 → 445 [ACK] Seq=309832875 Ack=66359 Win=2101760 Len=1460
501788  52.703858    10.2.55.11  10.2.20.11 TCP 1514    501788  66359   309834335   309835795   [TCP Retransmission] 60422 → 445 [ACK] Seq=309834335 Ack=66359 Win=2101760 Len=1460
501789  52.703858    10.2.55.11  10.2.20.11 TCP 1514    501789  66359   309835795   309837255   [TCP Retransmission] 60422 → 445 [ACK] Seq=309835795 Ack=66359 Win=2101760 Len=1460
501790  52.703858    10.2.55.11  10.2.20.11 TCP 1514    501790  66359   309837255   309838715   [TCP Retransmission] 60422 → 445 [ACK] Seq=309837255 Ack=66359 Win=2101760 Len=1460
501791  52.703858    10.2.55.11  10.2.20.11 TCP 1514    501791  66359   309838715   309840175   [TCP Retransmission] 60422 → 445 [ACK] Seq=309838715 Ack=66359 Win=2101760 Len=1460
501792  52.703989    10.2.20.11  10.2.55.11 TCP 60  501792  309752575   66359   66359   445 → 60422 [ACK] Seq=66359 Ack=309752575 Win=2102272 Len=0
501793  52.703989    10.2.20.11  10.2.55.11 TCP 60  501793  309837255   66359   66359   445 → 60422 [ACK] Seq=66359 Ack=309837255 Win=2102272 Len=0
501794  52.704020    10.2.20.11  10.2.55.11 TCP 60  501794  309840175   66359   66359   445 → 60422 [ACK] Seq=66359 Ack=309840175 Win=2102272 Len=0
501795  52.704228    10.2.55.11  10.2.20.11 TCP 1514    501795  66359   309878135   309879595   60422 → 445 [ACK] Seq=309878135 Ack=66359 Win=2101760 Len=1460 [TCP segment of a reassembled PDU]
501796  52.704372    10.2.55.11  10.2.20.11 TCP 1514    501796  66359   309879595   309881055   60422 → 445 [ACK] Seq=309879595 Ack=66359 Win=2101760 Len=1460 [TCP segment of a reassembled PDU]
501797  52.704372    10.2.55.11  10.2.20.11 TCP 1514    501797  66359   309881055   309882515   60422 → 445 [ACK] Seq=309881055 Ack=66359 Win=2101760 Len=1460 [TCP segment of a reassembled PDU]
501798  52.704372    10.2.55.11  10.2.20.11 TCP 1514    501798  66359   309882515   309883975   60422 → 445 [ACK] Seq=309882515 Ack=66359 Win=2101760 Len=1460 [TCP segment of a reassembled PDU]
501799  52.704372    10.2.55.11  10.2.20.11 TCP 1514    501799  66359   309883975   309885435   60422 → 445 [ACK] Seq=309883975 Ack=66359 Win=2101760 Len=1460 [TCP segment of a reassembled PDU]
501800  52.705001    10.2.55.11  10.2.20.11 TCP 1514    501800  66359   309840175   309841635   [TCP Out-Of-Order] 60422 → 445 [ACK] Seq=309840175 Ack=66359 Win=2101760 Len=1460 [TCP segment of a reassembled PDU]
501801  52.705001    10.2.55.11  10.2.20.11 TCP 1514    501801  66359   309841635   309843095   [TCP Out-Of-Order] 60422 → 445 [ACK] Seq=309841635 Ack=66359 Win=2101760 Len=1460 [TCP segment of a reassembled PDU]
501802  52.705001    10.2.55.11  10.2.20.11 TCP 1514    501802  66359   309843095   309844555   [TCP Out-Of-Order] 60422 → 445 [ACK] Seq=309843095 Ack=66359 Win=2101760 Len=1460 [TCP segment of a reassembled PDU]
501803  52.705025    10.2.20.11  10.2.55.11 TCP 60  501803  309756955   66359   66359   445 → 60422 [ACK] Seq=66359 Ack=309756955 Win=2102272 Len=0
501804  52.705140    10.2.55.11  10.2.20.11 TCP 1514    501804  66359   309844555   309846015   [TCP Out-Of-Order] 60422 → 445 [ACK] Seq=309844555 Ack=66359 Win=2101760 Len=1460 [TCP segment of a reassembled PDU]
501805  52.705140    10.2.55.11  10.2.20.11 TCP 1514    501805  66359   309846015   309847475   [TCP Out-Of-Order] 60422 → 445 [ACK] Seq=309846015 Ack=66359 Win=2101760 Len=1460 [TCP segment of a reassembled PDU]
501806  52.705140    10.2.55.11  10.2.20.11 TCP 1514    501806  66359   309847475   309848935   [TCP Out-Of-Order] 60422 → 445 [ACK] Seq=309847475 Ack=66359 Win=2101760 Len=1460 [TCP segment of a reassembled PDU]
501807  52.705140    10.2.55.11  10.2.20.11 TCP 1514    501807  66359   309848935   309850395   [TCP Out-Of-Order] 60422 → 445 [ACK] Seq=309848935 Ack=66359 Win=2101760 Len=1460 [TCP segment of a reassembled PDU]
501808  52.705140    10.2.55.11  10.2.20.11 TCP 1514    501808  66359   309850395   309851855   [TCP Out-Of-Order] 60422 → 445 [ACK] Seq=309850395 Ack=66359 Win=2101760 Len=1460 [TCP segment of a reassembled PDU]
501809  52.705369    10.2.20.11  10.2.55.11 TCP 60  501809  309847475   66359   66359   445 → 60422 [ACK] Seq=66359 Ack=309847475 Win=2102272 Len=0
501810  52.705369    10.2.20.11  10.2.55.11 TCP 60  501810  309851855   66359   66359   445 → 60422 [ACK] Seq=66359 Ack=309851855 Win=2102272 Len=0

loads of TCP Retransmission, TCP Out-Of-Order, TCP Dups

Hi, Having an issue trying to sort out why Im getting smashed with TCP Retransmission, TCP Out-Of-Order, TCP Dups. Also seeing loads of NBSS Continuation Message. This has been stripped down to 2 laptops and a switch and router - Router on a stick. ZBWL disabled. Host Firewalls not blocking. Just a file copy between 2 laptops on the different VLANs. Have tried a pacp with 2 laptops on same VLAN and just the Switch, still loads of black packets. MTUs in this simple (cutdown) setup are 1500--Pcap has 1500+14 ethernet header.

Any info on how I need to start to work my way through this please? Thanks

image descriptionimage description

501771  52.701934    10.2.55.11  10.2.20.11 TCP 1514    501771  66359   309815355   309816815   [TCP Retransmission] 60422 → 445 [ACK] Seq=309815355 Ack=66359 Win=2101760 Len=1460
501772  52.702037    10.2.20.11  10.2.55.11 TCP 60  501772  309813895   66359   66359   445 → 60422 [ACK] Seq=66359 Ack=309813895 Win=2102272 Len=0
501773  52.702170    10.2.20.11  10.2.55.11 TCP 60  501773  309816815   66359   66359   445 → 60422 [ACK] Seq=66359 Ack=309816815 Win=2102272 Len=0
501774  52.703239    10.2.55.11  10.2.20.11 TCP 1514    501774  66359   309816815   309818275   [TCP Retransmission] 60422 → 445 [ACK] Seq=309816815 Ack=66359 Win=2101760 Len=1460
501775  52.703239    10.2.55.11  10.2.20.11 TCP 1514    501775  66359   309818275   309819735   [TCP Retransmission] 60422 → 445 [ACK] Seq=309818275 Ack=66359 Win=2101760 Len=1460
501776  52.703239    10.2.55.11  10.2.20.11 TCP 1514    501776  66359   309819735   309821195   [TCP Retransmission] 60422 → 445 [ACK] Seq=309819735 Ack=66359 Win=2101760 Len=1460
501777  52.703380    10.2.55.11  10.2.20.11 TCP 1514    501777  66359   309821195   309822655   [TCP Retransmission] 60422 → 445 [ACK] Seq=309821195 Ack=66359 Win=2101760 Len=1460
501778  52.703380    10.2.55.11  10.2.20.11 TCP 1514    501778  66359   309822655   309824115   [TCP Retransmission] 60422 → 445 [ACK] Seq=309822655 Ack=66359 Win=2101760 Len=1460
501779  52.703380    10.2.55.11  10.2.20.11 TCP 1514    501779  66359   309824115   309825575   [TCP Retransmission] 60422 → 445 [ACK] Seq=309824115 Ack=66359 Win=2101760 Len=1460
501780  52.703380    10.2.55.11  10.2.20.11 TCP 1514    501780  66359   309825575   309827035   [TCP Retransmission] 60422 → 445 [ACK] Seq=309825575 Ack=66359 Win=2101760 Len=1460
501781  52.703380    10.2.55.11  10.2.20.11 TCP 1514    501781  66359   309827035   309828495   [TCP Retransmission] 60422 → 445 [ACK] Seq=309827035 Ack=66359 Win=2101760 Len=1460
501782  52.703388    10.2.20.11  10.2.55.11 TCP 60  501782  309822655   66359   66359   445 → 60422 [ACK] Seq=66359 Ack=309822655 Win=2102272 Len=0
501783  52.703539    10.2.20.11  10.2.55.11 TCP 60  501783  309827035   66359   66359   445 → 60422 [ACK] Seq=66359 Ack=309827035 Win=2102272 Len=0
501784  52.703718    10.2.55.11  10.2.20.11 TCP 1514    501784  66359   309828495   309829955   [TCP Retransmission] 60422 → 445 [ACK] Seq=309828495 Ack=66359 Win=2101760 Len=1460
501785  52.703718    10.2.55.11  10.2.20.11 TCP 1514    501785  66359   309829955   309831415   [TCP Retransmission] 60422 → 445 [ACK] Seq=309829955 Ack=66359 Win=2101760 Len=1460
501786  52.703718    10.2.55.11  10.2.20.11 TCP 1514    501786  66359   309831415   309832875   [TCP Retransmission] 60422 → 445 [ACK] Seq=309831415 Ack=66359 Win=2101760 Len=1460
501787  52.703858    10.2.55.11  10.2.20.11 TCP 1514    501787  66359   309832875   309834335   [TCP Retransmission] 60422 → 445 [ACK] Seq=309832875 Ack=66359 Win=2101760 Len=1460
501788  52.703858    10.2.55.11  10.2.20.11 TCP 1514    501788  66359   309834335   309835795   [TCP Retransmission] 60422 → 445 [ACK] Seq=309834335 Ack=66359 Win=2101760 Len=1460
501789  52.703858    10.2.55.11  10.2.20.11 TCP 1514    501789  66359   309835795   309837255   [TCP Retransmission] 60422 → 445 [ACK] Seq=309835795 Ack=66359 Win=2101760 Len=1460
501790  52.703858    10.2.55.11  10.2.20.11 TCP 1514    501790  66359   309837255   309838715   [TCP Retransmission] 60422 → 445 [ACK] Seq=309837255 Ack=66359 Win=2101760 Len=1460
501791  52.703858    10.2.55.11  10.2.20.11 TCP 1514    501791  66359   309838715   309840175   [TCP Retransmission] 60422 → 445 [ACK] Seq=309838715 Ack=66359 Win=2101760 Len=1460
501792  52.703989    10.2.20.11  10.2.55.11 TCP 60  501792  309752575   66359   66359   445 → 60422 [ACK] Seq=66359 Ack=309752575 Win=2102272 Len=0
501793  52.703989    10.2.20.11  10.2.55.11 TCP 60  501793  309837255   66359   66359   445 → 60422 [ACK] Seq=66359 Ack=309837255 Win=2102272 Len=0
501794  52.704020    10.2.20.11  10.2.55.11 TCP 60  501794  309840175   66359   66359   445 → 60422 [ACK] Seq=66359 Ack=309840175 Win=2102272 Len=0
501795  52.704228    10.2.55.11  10.2.20.11 TCP 1514    501795  66359   309878135   309879595   60422 → 445 [ACK] Seq=309878135 Ack=66359 Win=2101760 Len=1460 [TCP segment of a reassembled PDU]
501796  52.704372    10.2.55.11  10.2.20.11 TCP 1514    501796  66359   309879595   309881055   60422 → 445 [ACK] Seq=309879595 Ack=66359 Win=2101760 Len=1460 [TCP segment of a reassembled PDU]
501797  52.704372    10.2.55.11  10.2.20.11 TCP 1514    501797  66359   309881055   309882515   60422 → 445 [ACK] Seq=309881055 Ack=66359 Win=2101760 Len=1460 [TCP segment of a reassembled PDU]
501798  52.704372    10.2.55.11  10.2.20.11 TCP 1514    501798  66359   309882515   309883975   60422 → 445 [ACK] Seq=309882515 Ack=66359 Win=2101760 Len=1460 [TCP segment of a reassembled PDU]
501799  52.704372    10.2.55.11  10.2.20.11 TCP 1514    501799  66359   309883975   309885435   60422 → 445 [ACK] Seq=309883975 Ack=66359 Win=2101760 Len=1460 [TCP segment of a reassembled PDU]
501800  52.705001    10.2.55.11  10.2.20.11 TCP 1514    501800  66359   309840175   309841635   [TCP Out-Of-Order] 60422 → 445 [ACK] Seq=309840175 Ack=66359 Win=2101760 Len=1460 [TCP segment of a reassembled PDU]
501801  52.705001    10.2.55.11  10.2.20.11 TCP 1514    501801  66359   309841635   309843095   [TCP Out-Of-Order] 60422 → 445 [ACK] Seq=309841635 Ack=66359 Win=2101760 Len=1460 [TCP segment of a reassembled PDU]
501802  52.705001    10.2.55.11  10.2.20.11 TCP 1514    501802  66359   309843095   309844555   [TCP Out-Of-Order] 60422 → 445 [ACK] Seq=309843095 Ack=66359 Win=2101760 Len=1460 [TCP segment of a reassembled PDU]
501803  52.705025    10.2.20.11  10.2.55.11 TCP 60  501803  309756955   66359   66359   445 → 60422 [ACK] Seq=66359 Ack=309756955 Win=2102272 Len=0
501804  52.705140    10.2.55.11  10.2.20.11 TCP 1514    501804  66359   309844555   309846015   [TCP Out-Of-Order] 60422 → 445 [ACK] Seq=309844555 Ack=66359 Win=2101760 Len=1460 [TCP segment of a reassembled PDU]
501805  52.705140    10.2.55.11  10.2.20.11 TCP 1514    501805  66359   309846015   309847475   [TCP Out-Of-Order] 60422 → 445 [ACK] Seq=309846015 Ack=66359 Win=2101760 Len=1460 [TCP segment of a reassembled PDU]
501806  52.705140    10.2.55.11  10.2.20.11 TCP 1514    501806  66359   309847475   309848935   [TCP Out-Of-Order] 60422 → 445 [ACK] Seq=309847475 Ack=66359 Win=2101760 Len=1460 [TCP segment of a reassembled PDU]
501807  52.705140    10.2.55.11  10.2.20.11 TCP 1514    501807  66359   309848935   309850395   [TCP Out-Of-Order] 60422 → 445 [ACK] Seq=309848935 Ack=66359 Win=2101760 Len=1460 [TCP segment of a reassembled PDU]
501808  52.705140    10.2.55.11  10.2.20.11 TCP 1514    501808  66359   309850395   309851855   [TCP Out-Of-Order] 60422 → 445 [ACK] Seq=309850395 Ack=66359 Win=2101760 Len=1460 [TCP segment of a reassembled PDU]
501809  52.705369    10.2.20.11  10.2.55.11 TCP 60  501809  309847475   66359   66359   445 → 60422 [ACK] Seq=66359 Ack=309847475 Win=2102272 Len=0
501810  52.705369    10.2.20.11  10.2.55.11 TCP 60  501810  309851855   66359   66359   445 → 60422 [ACK] Seq=66359 Ack=309851855 Win=2102272 Len=0

loads of TCP Retransmission, TCP Out-Of-Order, TCP Dups

Hi, Having an issue trying to sort out why Im getting smashed with TCP Retransmission, TCP Out-Of-Order, TCP Dups. Also seeing loads of NBSS Continuation Message. This has been stripped down to 2 laptops and a switch and router - Router on a stick. ZBWL disabled. Host Firewalls not blocking. Just a file copy between 2 laptops on the different VLANs. Have tried a pacp with 2 laptops on same VLAN and just the Switch, still loads of black packets. MTUs in this simple (cutdown) setup are 1500--Pcap has 1500+14 ethernet header.

Any info on how I need to start to work my way through this please? Thanks

image description2022-08-17-18-31-35.png

501771  52.701934    10.2.55.11  10.2.20.11 TCP 1514    501771  66359   309815355   309816815   [TCP Retransmission] 60422 → 445 [ACK] Seq=309815355 Ack=66359 Win=2101760 Len=1460
501772  52.702037    10.2.20.11  10.2.55.11 TCP 60  501772  309813895   66359   66359   445 → 60422 [ACK] Seq=66359 Ack=309813895 Win=2102272 Len=0
501773  52.702170    10.2.20.11  10.2.55.11 TCP 60  501773  309816815   66359   66359   445 → 60422 [ACK] Seq=66359 Ack=309816815 Win=2102272 Len=0
501774  52.703239    10.2.55.11  10.2.20.11 TCP 1514    501774  66359   309816815   309818275   [TCP Retransmission] 60422 → 445 [ACK] Seq=309816815 Ack=66359 Win=2101760 Len=1460
501775  52.703239    10.2.55.11  10.2.20.11 TCP 1514    501775  66359   309818275   309819735   [TCP Retransmission] 60422 → 445 [ACK] Seq=309818275 Ack=66359 Win=2101760 Len=1460
501776  52.703239    10.2.55.11  10.2.20.11 TCP 1514    501776  66359   309819735   309821195   [TCP Retransmission] 60422 → 445 [ACK] Seq=309819735 Ack=66359 Win=2101760 Len=1460
501777  52.703380    10.2.55.11  10.2.20.11 TCP 1514    501777  66359   309821195   309822655   [TCP Retransmission] 60422 → 445 [ACK] Seq=309821195 Ack=66359 Win=2101760 Len=1460
501778  52.703380    10.2.55.11  10.2.20.11 TCP 1514    501778  66359   309822655   309824115   [TCP Retransmission] 60422 → 445 [ACK] Seq=309822655 Ack=66359 Win=2101760 Len=1460
501779  52.703380    10.2.55.11  10.2.20.11 TCP 1514    501779  66359   309824115   309825575   [TCP Retransmission] 60422 → 445 [ACK] Seq=309824115 Ack=66359 Win=2101760 Len=1460
501780  52.703380    10.2.55.11  10.2.20.11 TCP 1514    501780  66359   309825575   309827035   [TCP Retransmission] 60422 → 445 [ACK] Seq=309825575 Ack=66359 Win=2101760 Len=1460
501781  52.703380    10.2.55.11  10.2.20.11 TCP 1514    501781  66359   309827035   309828495   [TCP Retransmission] 60422 → 445 [ACK] Seq=309827035 Ack=66359 Win=2101760 Len=1460
501782  52.703388    10.2.20.11  10.2.55.11 TCP 60  501782  309822655   66359   66359   445 → 60422 [ACK] Seq=66359 Ack=309822655 Win=2102272 Len=0
501783  52.703539    10.2.20.11  10.2.55.11 TCP 60  501783  309827035   66359   66359   445 → 60422 [ACK] Seq=66359 Ack=309827035 Win=2102272 Len=0
501784  52.703718    10.2.55.11  10.2.20.11 TCP 1514    501784  66359   309828495   309829955   [TCP Retransmission] 60422 → 445 [ACK] Seq=309828495 Ack=66359 Win=2101760 Len=1460
501785  52.703718    10.2.55.11  10.2.20.11 TCP 1514    501785  66359   309829955   309831415   [TCP Retransmission] 60422 → 445 [ACK] Seq=309829955 Ack=66359 Win=2101760 Len=1460
501786  52.703718    10.2.55.11  10.2.20.11 TCP 1514    501786  66359   309831415   309832875   [TCP Retransmission] 60422 → 445 [ACK] Seq=309831415 Ack=66359 Win=2101760 Len=1460
501787  52.703858    10.2.55.11  10.2.20.11 TCP 1514    501787  66359   309832875   309834335   [TCP Retransmission] 60422 → 445 [ACK] Seq=309832875 Ack=66359 Win=2101760 Len=1460
501788  52.703858    10.2.55.11  10.2.20.11 TCP 1514    501788  66359   309834335   309835795   [TCP Retransmission] 60422 → 445 [ACK] Seq=309834335 Ack=66359 Win=2101760 Len=1460
501789  52.703858    10.2.55.11  10.2.20.11 TCP 1514    501789  66359   309835795   309837255   [TCP Retransmission] 60422 → 445 [ACK] Seq=309835795 Ack=66359 Win=2101760 Len=1460
501790  52.703858    10.2.55.11  10.2.20.11 TCP 1514    501790  66359   309837255   309838715   [TCP Retransmission] 60422 → 445 [ACK] Seq=309837255 Ack=66359 Win=2101760 Len=1460
501791  52.703858    10.2.55.11  10.2.20.11 TCP 1514    501791  66359   309838715   309840175   [TCP Retransmission] 60422 → 445 [ACK] Seq=309838715 Ack=66359 Win=2101760 Len=1460
501792  52.703989    10.2.20.11  10.2.55.11 TCP 60  501792  309752575   66359   66359   445 → 60422 [ACK] Seq=66359 Ack=309752575 Win=2102272 Len=0
501793  52.703989    10.2.20.11  10.2.55.11 TCP 60  501793  309837255   66359   66359   445 → 60422 [ACK] Seq=66359 Ack=309837255 Win=2102272 Len=0
501794  52.704020    10.2.20.11  10.2.55.11 TCP 60  501794  309840175   66359   66359   445 → 60422 [ACK] Seq=66359 Ack=309840175 Win=2102272 Len=0
501795  52.704228    10.2.55.11  10.2.20.11 TCP 1514    501795  66359   309878135   309879595   60422 → 445 [ACK] Seq=309878135 Ack=66359 Win=2101760 Len=1460 [TCP segment of a reassembled PDU]
501796  52.704372    10.2.55.11  10.2.20.11 TCP 1514    501796  66359   309879595   309881055   60422 → 445 [ACK] Seq=309879595 Ack=66359 Win=2101760 Len=1460 [TCP segment of a reassembled PDU]
501797  52.704372    10.2.55.11  10.2.20.11 TCP 1514    501797  66359   309881055   309882515   60422 → 445 [ACK] Seq=309881055 Ack=66359 Win=2101760 Len=1460 [TCP segment of a reassembled PDU]
501798  52.704372    10.2.55.11  10.2.20.11 TCP 1514    501798  66359   309882515   309883975   60422 → 445 [ACK] Seq=309882515 Ack=66359 Win=2101760 Len=1460 [TCP segment of a reassembled PDU]
501799  52.704372    10.2.55.11  10.2.20.11 TCP 1514    501799  66359   309883975   309885435   60422 → 445 [ACK] Seq=309883975 Ack=66359 Win=2101760 Len=1460 [TCP segment of a reassembled PDU]
501800  52.705001    10.2.55.11  10.2.20.11 TCP 1514    501800  66359   309840175   309841635   [TCP Out-Of-Order] 60422 → 445 [ACK] Seq=309840175 Ack=66359 Win=2101760 Len=1460 [TCP segment of a reassembled PDU]
501801  52.705001    10.2.55.11  10.2.20.11 TCP 1514    501801  66359   309841635   309843095   [TCP Out-Of-Order] 60422 → 445 [ACK] Seq=309841635 Ack=66359 Win=2101760 Len=1460 [TCP segment of a reassembled PDU]
501802  52.705001    10.2.55.11  10.2.20.11 TCP 1514    501802  66359   309843095   309844555   [TCP Out-Of-Order] 60422 → 445 [ACK] Seq=309843095 Ack=66359 Win=2101760 Len=1460 [TCP segment of a reassembled PDU]
501803  52.705025    10.2.20.11  10.2.55.11 TCP 60  501803  309756955   66359   66359   445 → 60422 [ACK] Seq=66359 Ack=309756955 Win=2102272 Len=0
501804  52.705140    10.2.55.11  10.2.20.11 TCP 1514    501804  66359   309844555   309846015   [TCP Out-Of-Order] 60422 → 445 [ACK] Seq=309844555 Ack=66359 Win=2101760 Len=1460 [TCP segment of a reassembled PDU]
501805  52.705140    10.2.55.11  10.2.20.11 TCP 1514    501805  66359   309846015   309847475   [TCP Out-Of-Order] 60422 → 445 [ACK] Seq=309846015 Ack=66359 Win=2101760 Len=1460 [TCP segment of a reassembled PDU]
501806  52.705140    10.2.55.11  10.2.20.11 TCP 1514    501806  66359   309847475   309848935   [TCP Out-Of-Order] 60422 → 445 [ACK] Seq=309847475 Ack=66359 Win=2101760 Len=1460 [TCP segment of a reassembled PDU]
501807  52.705140    10.2.55.11  10.2.20.11 TCP 1514    501807  66359   309848935   309850395   [TCP Out-Of-Order] 60422 → 445 [ACK] Seq=309848935 Ack=66359 Win=2101760 Len=1460 [TCP segment of a reassembled PDU]
501808  52.705140    10.2.55.11  10.2.20.11 TCP 1514    501808  66359   309850395   309851855   [TCP Out-Of-Order] 60422 → 445 [ACK] Seq=309850395 Ack=66359 Win=2101760 Len=1460 [TCP segment of a reassembled PDU]
501809  52.705369    10.2.20.11  10.2.55.11 TCP 60  501809  309847475   66359   66359   445 → 60422 [ACK] Seq=66359 Ack=309847475 Win=2102272 Len=0
501810  52.705369    10.2.20.11  10.2.55.11 TCP 60  501810  309851855   66359   66359   445 → 60422 [ACK] Seq=66359 Ack=309851855 Win=2102272 Len=0

loads of TCP Retransmission, TCP Out-Of-Order, TCP Dups

Hi, Having an issue trying to sort out why Im getting smashed with TCP Retransmission, TCP Out-Of-Order, TCP Dups. Also seeing loads of NBSS Continuation Message. This has been stripped down to 2 laptops and a switch and router - Router on a stick. ZBWL disabled. Host Firewalls not blocking. Just a file copy between 2 laptops on the different VLANs. Have tried a pacp with 2 laptops on same VLAN and just the Switch, still loads of black packets. MTUs in this simple (cutdown) setup are 1500--Pcap has 1500+14 ethernet header.

Any info on how I need to start to work my way through this please? Thanks

Link to pacp: link text

2022-08-17-18-31-35.png

loads of TCP Retransmission, TCP Out-Of-Order, TCP Dups

Hi, Having an issue trying to sort out why Im getting smashed with TCP Retransmission, TCP Out-Of-Order, TCP Dups. Also seeing loads of NBSS Continuation Message. This has been stripped down to 2 laptops and a switch and router - Router on a stick. ZBWL disabled. Host Firewalls not blocking. Just a file copy between 2 laptops on the different VLANs. Have tried a pacp with 2 laptops on same VLAN and just the Switch, still loads of black packets. MTUs in this simple (cutdown) setup are 1500--Pcap has 1500+14 ethernet header.

Any info on how I need to start to work my way through this please? Thanks

Link to pacp: pacp (28mb sanitised): link text

2022-08-17-18-31-35.png