Wireshark-users: Re: [Wireshark-users] (no subject)
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Stephen Fisher <stephentfisher@xxxxxxxxx>
Date: Tue, 21 Nov 2006 12:56:44 -0800
On Tue, Nov 21, 2006 at 01:34:27PM -0500, Jay Gellman wrote:

> I am tracking a slow email transfer problem with one of my servers and 
> have found the following:
> 
> I can see the handshake and transfer of commands to the mail server; I 
> see data flowing then after about 20 packets I see a TCP DUP Ack
> 
> Then the rest of the packets reply with a [TCP Window Full] Message 
> Body
> 
> Does anyone know what would cause this?

Is there a larger delay between packets once the window full messages 
start happening?  The easiest way to see this in Wireshark is to select 
View -> Time Display Format -> Seconds Since Previous Packet.


Steve