cannot access certain websites

The title says it all. To be specific, I cannot access deviantart.com and the tor project website. I keep getting a loading page. All other websites work fine. I recorded the traffic for 1 minute while the website (deviantart.com) was loading. It says I need 60 points to upload the pcapng file so I might not be able to do so.

updated 2018-01-16 19:06:47 +0000
This post is a wiki. Anyone with karma >750 is welcome to improve it.
edit flag offensive 0 remove flag close merge delete

Comments

Publish your file, login-free, at cloudshark or any plain file-sharing service and edit your question with a link to it.

sindy's avatar sindy (2018-01-16 19:16:22 +0000) edit

Okay, will do

moe's avatar moe (2018-01-16 19:20:32 +0000) edit
moe's avatar moe (2018-01-16 19:22:01 +0000) edit

Things I see in the capture file:

  • The client 192.168.100 is able to establish a TCP connection to 52.85.220.13 (www.deviantart.com) on port 443
  • Client tries to establish a TLS 1.2 session by sending a ClientHello record
  • ClientHello packet has not been acknowledged by server => There are retransmits from the client und duplicate ACKs from there server for the handshake ACK

Possible reasons: I can only speculate. Maybe a middle box which can't handle the TLS1.2 ClientHello packet.

Things you can try for testing:

  • disable HTTP/2 in your browser
  • disable TLS1.2 and use TLS1.0 or TLS1.1
Uli's avatar Uli (2018-01-16 20:40:31 +0000) edit

How do I disable TLS1.0/1.1 and HTTP/2 in firefox?

moe's avatar moe (2018-01-16 21:32:06 +0000) edit
add a comment see more comments