First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
0

determine the cause of huge packet delay

  • retag add tags

Hi, I have some slow response on my web server. Fallowing the caputre, i noticed a 5s' gap after the server's first ACK to the client's http request, which to my understanding should be the first segment of the data transfer packet. I think a network congestion or tcp slow start, or an I/O interruption could've been the cause, but have no idea how to figure it out, could someone help to take a look at the capture and help about? Thanks in advance.

1   15:04:42.289164 172.180.202.64  172.180.131.29  TCP 60  53112 → 8080 [SYN] Seq=0 Win=28000 Len=0 MSS=1400 SACK_PERM=1 TSval=2071020872 TSecr=0 WS=128
2   15:04:42.289226 172.180.131.29  172.180.202.64  TCP 60  8080 → 53112 [SYN, ACK] Seq=0 Ack=1 Win=28960 Len=0 MSS=1460 SACK_PERM=1 TSval=2515609186 TSecr=2071020872 WS=128
3   15:04:42.289370 172.180.202.64  172.180.131.29  TCP 52  53112 → 8080 [ACK] Seq=1 Ack=1 Win=28032 Len=0 TSval=2071020872 TSecr=2515609186
4   15:04:42.289405 172.180.202.64  172.180.131.29  HTTP    2208    POST /mx_dspt/onlineServiceTmc?productId=680307&trace_id=30794 HTTP/1.1 
5   15:04:42.289436 172.180.131.29  172.180.202.64  TCP 52  8080 → 53112 [ACK] Seq=1 Ack=2157 Win=33280 Len=0 TSval=2515609186 TSecr=2071020872
6   15:04:47.552760 172.180.131.29  172.180.202.64  TCP 6992    8080 → 53112 [ACK] Seq=1 Ack=2157 Win=33280 Len=6940 TSval=2515614449 TSecr=2071020872 [TCP segment of a reassembled PDU]
7   15:04:47.552797 172.180.131.29  172.180.202.64  TCP 1304    8080 → 53112 [PSH, ACK] Seq=6941 Ack=2157 Win=33280 Len=1252 TSval=2515614449 TSecr=2071020872 [TCP segment of a reassembled PDU]
tykytyzy's avatar
3
tykytyzy
asked 2022-02-21 01:22:43 +0000
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

1 Answer

0

It would appear it's the server that's slow to respond to the client request.

Frame 4 is the client POST request, frame 5 is the server TCP ack of that request and frame 6 is the start of the server response and this frame is 5 seconds later than the previous, so something is slow on the server side, likely NOT network related with the TCP stream to the client.

grahamb's avatar
23.8k
grahamb
answered 2022-02-21 09:09:48 +0000
edit flag offensive 0 remove flag delete link

Comments

add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer