Category: TCP analysis

PMTUD or not? Part 2. My answers.

Posted on by Vladimir Gerasimov

WARNING!

This blog post contains answers to the questions I’ve asked in my “PMTUD or not? Troubleshooting case” article. If you want to work through them yourself, do not read the following.

Ok, let’s start. First I want to say that these answers are just my thoughts, and if you don’t agree – welcome to have a discussion. Maybe I’ll learn a lot of new things, and this is always great.

So,

Standalone question 1.  Why the first thing I did was the server side capture?

My answer consists of two parts. Read more…

PMTUD or not? Troubleshooting case

Posted on by Vladimir Gerasimov

One day when I had a couple of free minutes I decided to perform some baselining in our office network.

The Problem

This time my eye caught an interesting pattern in our NAS device traffic. Look at the screenshot below:

1

You see it? Maybe a couple of retransmissions? They may seem interesting. Delay of 6 seconds – it’s quite large to pay attention to it. But honestly there was some NFS-related stuff happening on the background that I’ve filtered out from the trace. So that’s not what I want to show you.

Now I’m talking about all those packets starting from number 67. All of them are 590 bytes in size. Of course, there are many packets, that are even less in size we can see before packet 67, BUT “TCP segment of a reassembled PDU” sign and the same size of 590 bytes tell us clearly that after packet 67 there must be fully-loaded packets. Fully-loaded packets of only 590 bytes size? Why is that? Read more…

Hi there!

Posted on by Vladimir Gerasimov

I’m Vladimir, and I’m into Protocol analysis and troubleshooting for 5 years. I’m WCNA and CCNA.

Here I would like to share my experience – cases, tricks and other stuff I find interesting.

If you have any questions – feel free to contact me on Linkedin or by mail on vlad [at] packettrain.net or just leave a comment.