Wireshark-users: Re: [Wireshark-users] Problems transfering Clear Text files over a WAN LINK

From: "Sheahan, John" <John.Sheahan@xxxxxxxxxxxxx>
Date: Fri, 6 Nov 2009 10:56:36 -0500

I haven’t had a chance to look at the trace yet but my first thought is that you might be looking at asynchronous routing meaning that the send packets take one network path and the receive packets come back on another network path. The problem I have seen in the past is that when asynchronous routing occurs and there happens to be a firewall on one of the paths, you can experience the symptoms that are seeing. Also, if any of your network equipment is Cisco, they have something called CEF (Cisco express forwarding) that will automatically load balance your traffic based on the IP address and other criteria which often times causes asynchronous routing.

 

My suggestion would be to map out the path from source to destination using a trace route and do the same thing from destination to source which will confirm whether or not you have asynchronous routing. Then, find all firewalls on both paths and see if you can get the firewall admin to debug them when you recreate the issue you’re having.

 

 

 

 

From: wireshark-users-bounces@xxxxxxxxxxxxx [mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of Ricardo Garcia Torres
Sent: Friday, November 06, 2009 10:23 AM
To: wireshark-users@xxxxxxxxxxxxx
Subject: [Wireshark-users] Problems transfering Clear Text files over a WAN LINK

 

Hey There,
I was wondering if any of you would help me out here. I'm having a hard time trying to transfer text files over my WAN link. I have several other sites where I have no problems with this.

I'm able to transfer these files in one direction (let's say site A to site B) but when I try to transfer these files in the opposite direction (from B to A), after that it just stalls and do nothing for a few seconds, then I got various error messages everytime I try to copy the files. Either the network is no longer available or the path is too long or something like that.

I have tried everything I can possible think of and I got stuck here.
I'm pretty sure that it has something to do with some windows server policy or restriction somewhere.

I got a capture with wireshark and the only thing I can see is packets received out of order, packets lost and retransmissions to packets that were properly received.

I'm going insane, that's why I'm sending this thread to see if someone here have had the same problem and suggest a fix. I'm attaching the pcap file but I'm not sure if you will be able to see it.

Thanks in advance for your help.
______________________________________________________
Ricardo García