After looking at the trace, I remember seeing something similar
to this that I had to troubleshoot once where the traffic was being dropped and
retransmissions were happening in only one direction.
The resolution turned out to be two concurrent problems:
1.
a partially bad WAN circuit where traffic was being randomly
dropped only in one direction so I would open a ticket with your carrier to get
it tested in both directions. When we fixed this, most of the retransmissions
cleared up but we still had some occasionally.
2.
The second part of the fix was that I did have asynchronous
routing but there were no firewalls between the source and destination in either
direction so by moving my sniffer around, I tracked where the packets were
getting dropped (which happened to be on the return traffic path which took a
completely different route than the send traffic) and it turned out to be a bad
Cisco card in the 6500 switch. I opened a ticket with Cisco and sent them the
traces that proved it and they denied it so I had to force them to send me a
replacement card anyway and it fixed the problem.
From:
wireshark-users-bounces@xxxxxxxxxxxxx
[mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of Ricardo
Garcia Torres
Sent: Friday, November 06, 2009 10:23 AM
To: wireshark-users@xxxxxxxxxxxxx
Subject: [Wireshark-users] Problems transfering Clear Text files over a
WAN LINK
Hey There,
I was wondering if any of you would help me out here. I'm having a hard time
trying to transfer text files over my WAN link. I have several other sites
where I have no problems with this.
I'm able to transfer these files in one direction (let's say site A to site B)
but when I try to transfer these files in the opposite direction (from B to A),
after that it just stalls and do nothing for a few seconds, then I got various
error messages everytime I try to copy the files. Either the network is no
longer available or the path is too long or something like that.
I have tried everything I can possible think of and I got stuck here.
I'm pretty sure that it has something to do with some windows server policy or
restriction somewhere.
I got a capture with wireshark and the only thing I can see is packets received
out of order, packets lost and retransmissions to packets that were properly
received.
I'm going insane, that's why I'm sending this thread to see if someone here
have had the same problem and suggest a fix. I'm attaching the pcap file but
I'm not sure if you will be able to see it.
Thanks in advance for your help.
______________________________________________________
Ricardo García