[3079] in linux-net channel archive
Tcpdump interpretation, again
daemon@ATHENA.MIT.EDU (Robert Wuest)
Fri May 31 22:09:19 1996
Date: Fri, 31 May 1996 20:24:35 +0000
From: Robert Wuest <rwuest@ix.netcom.com>
To: Linux Net <linux-net@vger.rutgers.edu>
Hi again,
I don't want to appear too stupid, but I really am trying
to figure this out.
I'm running (I remember, Michael :-) ) Linux 1.99.9, ppp-2.20f,
Machine is a P100 w/48M, and a hodgepodge of drives, SCSI,
EIDE (if I could find it working cheap, it's in my box!).
Downloading with Netscape NavigatorTM Gold Version 3.0b4.
I was ftping a file, and it was going pretty slow (460 bps on a 14.4
connection) , so I took a gander w/ tcpdump and found this.
( BTW:
A = har-tx1-04.ix.netcom.com.1159 <- this is "me"
B = 128.112.169.21.33708 <- ftp.cs.princeton.edu
for brevity, though it's still kinda wide
)
18:03:01.624757 A > B: . ack 127260 win 31744 I ack last packet
18:03:02.174757 B > A: . 127260:128720(1460) ack 1 win 8760 (DF) [tos 0x10] B sends next packet
18:03:02.464757 A > B: . ack 128720 win 31744 I ack it
18:03:03.034757 B > A: P 128720:130180(1460) ack 1 win 8760 (DF) [tos 0x10] B sends next
18:03:03.034757 A > B: . ack 130180 win 31744 and I ack it.
18:03:04.124757 B > A: . 125800:127260(1460) ack 1 win 8760 (DF) [tos 0x10] but B sends a prev packet
18:03:04.124757 A > B: . ack 130180 win 31744
18:03:05.014757 B > A: . 125800:127260(1460) ack 1 win 8760 (DF) [tos 0x10] and again
18:03:05.014757 A > B: . ack 130180 win 31744
18:03:05.894757 B > A: . 125800:127260(1460) ack 1 win 8760 (DF) [tos 0x10] and again
18:03:05.894757 A > B: . ack 130180 win 31744
18:03:06.764757 B > A: . 125800:127260(1460) ack 1 win 8760 (DF) [tos 0x10] and again
18:03:06.764757 A > B: . ack 130180 win 31744
18:03:07.604757 B > A: . 127260:128720(1460) ack 1 win 8760 (DF) [tos 0x10] Didn't I already ack this a the top there?
18:03:07.604757 A > B: . ack 130180 win 31744
18:03:08.464757 B > A: . 128720:130180(1460) ack 1 win 8760 (DF) [tos 0x10] Haven't I acked this
18:03:08.464757 A > B: . ack 130180 win 31744
18:03:08.964757 B > A: . 130180:131072(892) ack 1 win 8760 (DF) [tos 0x10] Finally, we move on
18:03:09.254757 A > B: . ack 131072 win 31744
18:03:09.794757 B > A: . 131072:132532(1460) ack 1 win 8760 (DF) [tos 0x10] Looks right
18:03:10.084757 A > B: . ack 132532 win 31744
18:03:10.654757 B > A: P 132532:133992(1460) ack 1 win 8760 (DF) [tos 0x10] Looks right
18:03:10.654757 A > B: . ack 133992 win 31744
18:03:11.694757 B > A: . 130180:131640(1460) ack 1 win 8760 (DF) [tos 0x10] ah oh, sent and acked, so why again
18:03:11.694757 A > B: . ack 133992 win 31744
18:03:12.544757 B > A: . 130180:131640(1460) ack 1 win 8760 (DF) [tos 0x10] and again
18:03:12.544757 A > B: . ack 133992 win 31744
18:03:13.394757 B > A: . 130180:131640(1460) ack 1 win 8760 (DF) [tos 0x10] and again
18:03:13.394757 A > B: . ack 133992 win 31744
18:03:14.234757 B > A: . 130180:131640(1460) ack 1 win 8760 (DF) [tos 0x10] and again
18:03:14.234757 A > B: . ack 133992 win 31744
18:03:15.064757 B > A: . 131072:132532(1460) ack 1 win 8760 (DF) [tos 0x10] This has been sent and acked
18:03:15.064757 A > B: . ack 133992 win 31744
18:03:15.874757 B > A: . 132532:133992(1460) ack 1 win 8760 (DF) [tos 0x10] This, too
18:03:15.874757 A > B: . ack 133992 win 31744
18:03:16.724757 B > A: . 132532:133992(1460) ack 1 win 8760 (DF) [tos 0x10] And again
18:03:16.724757 A > B: . ack 133992 win 31744
18:03:17.554757 B > A: . 133992:135452(1460) ack 1 win 8760 (DF) [tos 0x10] And again
18:03:17.844757 A > B: . ack 135452 win 31744
I don't get it! Lot's of wasted bandwidth here with some of these packets being
sent three or four times. Is princeton's server messing up. Surely, this isn't
right.
Thanks,
Robert
--
mailto:rwuest@ix.netcom.com
Empowered by Linux.
mke2fs /dev/hda1
