Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

Random Flooding of TCP Retransmissions

Hi guys,

So I have a small WISP, and at random times I get a flood of TCP Retransmission packets that slows down the entire network:

With a delayed struggle I can access the core Mikrotik and drop all packets from the originating IP, and immediately this behaviour stops. I have rules to detect a DDoS attack but this random behaviour doesn't trigger any of those, and normally this doesn't last longer than about 5 to 10 minutes. It is however super annoying as immediately latency to the internet jumps through the roof and throughput dies to a complete standstill.

Does anyone have any advice in terms of what could be causing this and more importantly, how one can prevent it?

Thanks a million.

Best Regards,