Hi. I have some issues with https traffic. When I try to open this kind of pages, they are turned very slow. I captured some traffic whit wireshark, however I can´t see where the problem is. Into Wireshark I identified a lot of packet as retransmissions. I had done a lot of actions: • All the switch ports, router ports, AP ports I had revised. They haven’t errors, collisions or crc. • In the network there is many VLANs, this problem affected the more saturated vlan. • I have two router and they work in HSRP. I disabled the HSRP. • I revised the logs in all the devices but any message is about this problem. Could anyone help me? How can I attach a wireshark file? Regards These two link correspond to the wireshark files. https://www.dropbox.com/s/c98hy9d2dbie5xb/Captura23%202sep15%20BBVA.pcapng?dl=0 https://www.dropbox.com/s/sesfcbxsrcc5vfl/Captura24%202sep15%20BBVA.pcapng?dl=0 asked 02 Sep '15, 07:56  JorgeC edited 02 Sep '15, 13:11 |
One Answer:
So after cleaning the files we can see a packet loss rate higher then 4% in the tracefile. The MSS of the System 10.10.10.108 is really small with 696 Bytes. is it really needed? And we see a gap of 10 seconds between DUP ACK and Retransmission.(See Frame #1996 in Captura24...) Where the packet loss occur... The easiest way is to follow the packets with your caprturepoint. And see where the packet loss occurs. answered 02 Sep '15, 15:16  Christian_R Thank you. I will work into your recommends. Best Regards. (03 Sep '15, 12:39) JorgeC |
You can share a capture in a publicly accessible spot, e.g. CloudShark, Google Drive, Dropbox.
First of all you should try:
This eleminates the duplicates in the tracefiles, because every packet has been captured twice.