Well, I have seen things like this happen when supposedly "smart" security devices are placed in line. I had a experience with a large company that used Cisco IPS sensors. By default the IPS sensors tried to "fix" problems with changing TTLs in the middle of a stream or packets showing up out of order. Even when a host sets the do not fragment but the MTU has to be set smaller to fit down a VPN, so things get fragmented... there are many reasons why some of these "problems" are generated, when they are not actually problems. The unlogged "fixes" the IPS sensors made on the traffic just made it worse. The traffic captures looked something like your example.

I am not saying that is definitely the problem. You know the network between the two sites better than I do. Maybe there are some conflicting things going on.

What does mtr (Matt's Traceroute) show from one host to the other ?



At 05:31 PM 10/4/2006, you wrote:
http://pastebin.ca/191461

Can someone take a look at that tethereal output and tell me what they think? Is that a seriously screwed up net connection or is that normal? That is downloading a file from our website in San Diego to our New York office taken on the New York firewall box

I am trying to diagnose why we continually have dropped packets and problems with the VOIP audio quality. I can't figure out if it is us or our network provider.

--
Tracy R Reed                  http://ultraviolet.org
A: Because we read from top to bottom, left to right
Q: Why should I start my reply below the quoted text


--
[email protected]
http://www.kernel-panic.org/cgi-bin/mailman/listinfo/kplug-list


--
[email protected]
http://www.kernel-panic.org/cgi-bin/mailman/listinfo/kplug-list

Reply via email to