u...@stderr.spb.ru (Valery Ushakov) writes:
The timestamps don't make sense.
>> 413 00.000351 IP utilite.1011 > majava.nfs: Flags [.],
> seq 177121:178569, ack 79601, win 3225,
> options [nop,nop,TS val 111 ecr 1941833655],
> length 1448:
> NFS request xid 1992059772 1444 write fh ... 5406 (5406) bytes
> @ 16384
echo 1941833655 from a previous packet
>> 414 00.000048 IP utilite.1011 > majava.nfs: Flags [.],
> seq 178569:180017, ack 79601, win 3225,
> options [nop,nop,TS val 111 ecr 1941833655],
> length 1448
echo 1941833655 from a previous packet
> 415 00.000009 IP majava.nfs > utilite.1011: Flags [.],
> ack 180017, win 1834,
> options [nop,nop,TS val 1941833656 ecr 111],
> length 0
TS 1941833656
>> 416 00.000051 IP utilite.1011 > majava.nfs: Flags [.],
> seq 180017:181465, ack 79601, win 3225,
> options [nop,nop,TS val 111 ecr 1941833655],
> length 1448
still echoing 1941833655
> 417 00.043745 IP majava.nfs > utilite.1011: Flags [.],
> ack 181465, win 1834,
> options [nop,nop,TS val 1941833700 ecr 111],
> length 0
TS 1941833700
>> 418 00.994813 IP utilite.1011 > majava.nfs: Flags [P.],
> seq 181465:182645, ack 79601, win 3225,
> options [nop,nop,TS val 111 ecr 1941833655],
> length 1180
still echoing 1941833655
> 419 00.000032 IP majava.nfs > utilite.1011: Flags [.],
> ack 182645, win 1834,
> options [nop,nop,TS val 1941834694 ecr 111],
> length 0
TS 1941834694
... about a second later than 418 (ts 111 -> 113)
>! 420 00.000007 IP utilite.1011 > majava.nfs: Flags [P.],
> seq 181465:182645, ack 79601, win 3225,
> options [nop,nop,TS val 113 ecr 1941833700],
> length 1180
now echoing 1941833700
> 421 00.000009 IP majava.nfs > utilite.1011: Flags [.],
> ack 182645, win 1834,
> options [nop,nop,TS val 1941834694 ecr 113,nop,nop,
> sack 1 {181465:182645}],
> length 0
again TS 1941834694. A duplicate ACK for 181465:182645.
--
--
Michael van Elst
Internet: mlel...@serpens.de
"A potential Snark may lurk in every tree."
