I got a strange behavior for certain packet used by GPIO protocol , some times destination server do not send ack for this request
both machine os is windows 2019 running on VMware and they reside on the same sub net and communicate directly on layer 2
source end the connection with RST,ACK,CWR after multiple PSH,ACK despite that on the destination server i captured the request being received
what is odd is that it don't happen always sometimes it just don't send the ack and for the same request . i checked windows firewall and its allowed and everything work perfectly till this happens , also it become clear that if this scenario happen it will happen as below
1st request fails to ack
2nd request fails to ack
3rd request is successful
have anyone got into this situation ? how we can get the root cause or diagnose something like that ?
thank you a lot
source
Frame 15514: 326 bytes on wire (2608 bits), 326 bytes captured (2608 bits) on interface 0
Interface id: 0 (\Device\NPF_{6914DD91-9AD9-48FC-B356-EEEC44A87E5D})
Interface name: \Device\NPF_{6914DD91-9AD9-48FC-B356-EEEC44A87E5D}
Interface description: Ethernet0
Encapsulation type: Ethernet (1)
Arrival Time: Sep 5, 2023 10:08:01.124920000 Arab Standard Time
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1693897681.124920000 seconds
[Time delta from previous captured frame: 0.001255000 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 241.450188000 seconds]
Frame Number: 15514
Frame Length: 326 bytes (2608 bits)
Capture Length: 326 bytes (2608 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ethertype:ip:tcp:giop]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: Vmware_b6:17:1e (00:50:56:b6:17:1e), Dst: Vmware_b6:98:44 (00:50:56:b6:98:44)
Destination: Vmware_b6:98:44 (00:50:56:b6:98:44)
Address: Vmware_b6:98:44 (00:50:56:b6:98:44)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Source: Vmware_b6:17:1e (00:50:56:b6:17:1e)
Address: Vmware_b6:17:1e (00:50:56:b6:17:1e)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Type: IPv4 (0x0800)
Internet Protocol Version 4, Src: 10.20.151.28, Dst: 10.20.151.21
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x02 (DSCP: CS0, ECN: ECT(0))
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..10 = Explicit Congestion Notification: ECN-Capable Transport codepoint '10' (2)
Total Length: 312
Identification: 0xac55 (44117)
Flags: 0x4000, Don't fragment
0... .... .... .... = Reserved bit: Not set
.1.. .... .... .... = Don't fragment: Set
..0. .... .... .... = More fragments: Not set
...0 0000 0000 0000 = Fragment offset: 0
Time to live: 128
Protocol: TCP (6)
Header checksum: 0x0000 [validation disabled]
[Header checksum status: Unverified]
Source: 10.20.151.28
Destination: 10.20.151.21
Transmission Control Protocol, Src Port: 61628, Dst Port: 5096, Seq: 1, Ack: 1, Len: 272
Source Port: 61628
Destination Port: 5096
[Stream index: 159]
[TCP Segment Len: 272]
Sequence number: 1 (relative sequence number)
[Next sequence number: 273 (relative sequence number)]
Acknowledgment number: 1 (relative ack number)
0101 .... = Header Length: 20 bytes (5)
Flags: 0x018 (PSH, ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Nonce: Not set
.... 0... .... = Congestion Window Reduced (CWR): Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 1... = Push: Set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······AP···]
Window size value: 8209
[Calculated window size: 8209]
[Window size scaling factor: -1 (unknown)]
Checksum: 0x4384 [unverified]
[Checksum Status: Unverified]
Urgent pointer: 0
[SEQ/ACK analysis]
[Bytes in flight: 272]
[Bytes sent since last PSH flag: 272]
[Timestamps]
[Time since first frame in this TCP stream: 0.000000000 seconds]
[Time since previous frame in this TCP stream: 0.000000000 seconds]
TCP payload (272 bytes)
[PDU Size: 272]
General Inter-ORB Protocol
GIOP Header
Magic: GIOP
Version: 1.2
Major Version: 1
Minor Version: 2
Message Flags: 0x00, (Big Endian)
.... 0... = ZIOP Enabled: False
.... .0.. = ZIOP Supported: False
.... ..0. = Fragment: False
.... ...0 = Little Endian: False
Message type: Request (0)
Message size: 260
General Inter-ORB Protocol Request
Request id: 15
Response flags: SyncScope WITH_TARGET (3)
Reserved: 000000
TargetAddress: KeyAddr (0)
Key Address Length: 131
Key Address: ....NUP...:........RootPOA.TxnManager.1.ATMCM1.jnb.com.jo.persistent.........TxnManager.1.ATMCM1.jnb.com.jo.ChannelManagerInterface
Operation length: 16
Request operation: create_interface
ServiceContextList
Sequence Length: 3
ServiceContext
0000 0000 0000 0000 0000 0000 .... .... = VSCID: 0x000000
.... .... .... .... .... .... 0000 0001 = SCID: CodeSets (0x01)
Sequence Length: 12
Endianness: Big Endian (0)
char data: ISO_8859_1 (65537)
wchar data: ISO_UTF_16 (65801)
ServiceContext
0000 0000 0000 0000 0000 0000 .... .... = VSCID: 0x000000
.... .... .... .... .... .... 0001 0001 = SCID: Unknown (0x11)
Sequence Length: 2
Endianness: Big Endian (0)
Context Data: .
ServiceContext
0000 0000 0100 1110 0100 0101 .... .... = VSCID: 0x004e45
.... .... .... .... .... .... 0000 0000 = SCID: 0x00
Sequence Length: 2
Endianness: Big Endian (0)
Context Data: .
Stub data:
000000120042005700520065007100750065007300740045...000000120042005700520065007100750065007300740045...
Destination
Frame 56297: 326 bytes on wire (2608 bits), 326 bytes captured (2608 bits) on interface 0
Interface id: 0 (\Device\NPF_{DFC5955B-6ECF-444D-8CF8-8D67697A0443})
Interface name: \Device\NPF_{DFC5955B-6ECF-444D-8CF8-8D67697A0443}
Interface description: Ethernet0
Encapsulation type: Ethernet (1)
Arrival Time: Sep 5, 2023 10:08:01.124252000 Arab Standard Time
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1693897681.124252000 seconds
[Time delta from previous captured frame: 0.001267000 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 405.165223000 seconds]
Frame Number: 56297
Frame Length: 326 bytes (2608 bits)
Capture Length: 326 bytes (2608 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ethertype:ip:tcp:giop]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: Vmware_b6:17:1e (00:50:56:b6:17:1e), Dst: Vmware_b6:98:44 (00:50:56:b6:98:44)
Destination: Vmware_b6:98:44 (00:50:56:b6:98:44)
Address: Vmware_b6:98:44 (00:50:56:b6:98:44)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Source: Vmware_b6:17:1e (00:50:56:b6:17:1e)
Address: Vmware_b6:17:1e (00:50:56:b6:17:1e)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Type: IPv4 (0x0800)
Internet Protocol Version 4, Src: 10.20.151.28, Dst: 10.20.151.21
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x02 (DSCP: CS0, ECN: ECT(0))
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..10 = Explicit Congestion Notification: ECN-Capable Transport codepoint '10' (2)
Total Length: 312
Identification: 0xac55 (44117)
Flags: 0x4000, Don't fragment
0... .... .... .... = Reserved bit: Not set
.1.. .... .... .... = Don't fragment: Set
..0. .... .... .... = More fragments: Not set
...0 0000 0000 0000 = Fragment offset: 0
Time to live: 128
Protocol: TCP (6)
Header checksum: 0x0b0f [validation disabled]
[Header checksum status: Unverified]
Source: 10.20.151.28
Destination: 10.20.151.21
Transmission Control Protocol, Src Port: 61628, Dst Port: 5096, Seq: 1, Ack: 1, Len: 272
Source Port: 61628
Destination Port: 5096
[Stream index: 373]
[TCP Segment Len: 272]
Sequence number: 1 (relative sequence number)
[Next sequence number: 273 (relative sequence number)]
Acknowledgment number: 1 (relative ack number)
0101 .... = Header Length: 20 bytes (5)
Flags: 0x018 (PSH, ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Nonce: Not set
.... 0... .... = Congestion Window Reduced (CWR): Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 1... = Push: Set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······AP···]
Window size value: 8209
[Calculated window size: 8209]
[Window size scaling factor: -1 (unknown)]
Checksum: 0xb142 [unverified]
[Checksum Status: Unverified]
Urgent pointer: 0
[SEQ/ACK analysis]
[Bytes in flight: 272]
[Bytes sent since last PSH flag: 272]
[Timestamps]
[Time since first frame in this TCP stream: 0.000000000 seconds]
[Time since previous frame in this TCP stream: 0.000000000 seconds]
TCP payload (272 bytes)
[PDU Size: 272]
General Inter-ORB Protocol
GIOP Header
Magic: GIOP
Version: 1.2
Major Version: 1
Minor Version: 2
Message Flags: 0x00, (Big Endian)
.... 0... = ZIOP Enabled: False
.... .0.. = ZIOP Supported: False
.... ..0. = Fragment: False
.... ...0 = Little Endian: False
Message type: Request (0)
Message size: 260
General Inter-ORB Protocol Request
Request id: 15
Response flags: SyncScope WITH_TARGET (3)
Reserved: 000000
TargetAddress: KeyAddr (0)
Key Address Length: 131
Key Address: ....NUP...:........RootPOA.TxnManager.1.ATMCM1.jnb.com.jo.persistent.........TxnManager.1.ATMCM1.jnb.com.jo.ChannelManagerInterface
Operation length: 16
Request operation: create_interface
ServiceContextList
Sequence Length: 3
ServiceContext
0000 0000 0000 0000 0000 0000 .... .... = VSCID: 0x000000
.... .... .... .... .... .... 0000 0001 = SCID: CodeSets (0x01)
Sequence Length: 12
Endianness: Big Endian (0)
char data: ISO_8859_1 (65537)
wchar data: ISO_UTF_16 (65801)
ServiceContext
0000 0000 0000 0000 0000 0000 .... .... = VSCID: 0x000000
.... .... .... .... .... .... 0001 0001 = SCID: Unknown (0x11)
Sequence Length: 2
Endianness: Big Endian (0)
Context Data: .
ServiceContext
0000 0000 0100 1110 0100 0101 .... .... = VSCID: 0x004e45
.... .... .... .... .... .... 0000 0000 = SCID: 0x00
Sequence Length: 2
Endianness: Big Endian (0)
Context Data: .
Stub data:
000000120042005700520065007100750065007300740045...000000120042005700520065007100750065007300740045...
