nsaword.blogg.se

Wireshark tcp retransmission
Wireshark tcp retransmission









60 new connections per second from several different hosts is more than OK, but it is unrealistic if they are coming from a single host. If you are trying to simulate user load I'm afraid you're not doing it right. 60 new connection per second from the same host is considered harmful by pretty much every network and security administrator out there and any default settings on a firewall or even on a proxy will start silently dropping your traffic. The retransmissions you're seeing are probably due to someone else in the network dropping any other SYN packets from you. I see in your capture's screenshot that it has been 2 seconds since you started the process and you've mentioned getting stuck after ~120 connections, which is a good number of new connections in 2 seconds. As symcbean pointed out, it is more efficient and it may be so evident on your example because you're quickly opening lots of new sockets. Reusing TCP ports is not a bad thing per se. Also FIN, ACK and RST received for the earlier request.Īttaching tcp dump screenshot for reference:Ĭan you please let me know why it is using same port for the new request and re-transmitting the packet again? Is there a way to avoid port reuse? During this hanged state, I took tcpdump on server and found that it is showing "TCP port numbers reused" and start sending sync packet with same port which was used earlier and showing "TCP Retransmisson". This URL I have blocked on URL filtering engine.Īfter some requests ~120 wget got hanged in between for exactly 1 min. This URL filtering engine which will allow/block URL according to the rule.įrom client I have run a script which does 500 wget to in a loop continuously. Squid then forwards to a URL Filter which has a list of whitelists and blacklists.

wireshark tcp retransmission wireshark tcp retransmission

I have a squid proxy installed on a unix machine which is sending handling http requests coming from an trusted source. Facing issues due to TCP Port Reuse and Retransmission for HTTP traffic.











Wireshark tcp retransmission