Hi guys,
So I have a small WISP, and at random times I get a flood of TCP Retransmission packets that slows down the entire network:
http://i64.tinypic.com/t0lun9.jpg
With a delayed struggle I can access the core Mikrotik and drop all packets from the originating IP, and immediately this behaviour stops. I have rules to detect a DDoS attack but this random behaviour doesn't trigger any of those, and normally this doesn't last longer than about 5 to 10 minutes. It is however super annoying as immediately latency to the internet jumps through the roof and throughput dies to a complete standstill.
Does anyone have any advice in terms of what could be causing this and more importantly, how one can prevent it?
Thanks a million.
Best Regards,
