I have a mirrored capture of a simple Ethernet (100BaseT) link as shown It is your job to find what is likely to be the common cause (possibly through exacibating the situation by loading up the link/server with work to do) and come up with a mitigating strategy.
The root cause could be physical errors on the wire/fibre/airwaves, congestion on the network (resulting in drops or delays at routers/switches) or even exhaustion of resources on the client or server preventing it serving the request quick enough. The TCP process will ask for the segment again. Retransmissions are basically caused when a TCP segment arrives corrupt or does not arrive or is not acknowledged in a timely enough fashion. Wireshark will always try to show a frame at the highest level possible, so an FTP retransmission for example will in fact be at the TCP level.
They are expecting TCP to reliablly carry their application payload. FTP-Data and GIOP are application protocols that both useTCP for transport. I would suspect that all of your your retransmissions are TCP.
0 kommentar(er)
