Many "Bad TCP" packets.
Is it normal to have that many Dup ACKs, Out-Of-Orders, etc. Please take a look at my capture file - https://www.cloudshark.org/captures/e...
1 Answer
- Sort by
oldest newest most voted
0
It depends on capture setup, link type, the path data is flowing etc.
TCP Dup ACKs are part of normal TCP loss recovery mechanism. You should pay close attention to them if you have performance problems.
TCP out-of-orders can be a sign of not optimal capture setup or equal cost multipath on the network.
In your trace I do not see much influence from these packets on transfer speed (look at the delta time column).
Comments
Capture setup is default, my internet access is over optical fiber (provider - https://www.kopiyka.org). Dup ACKs mean that there is a packet loss, right? But when i ping sites i get almost zero loss (i leave pinging overnight and get 2-3 packets lost out of 30000).
Keep in mind that ICMP pinging is absolutely different in its nature than TCP file transfer.
When you ping a site:
- you don't stress the connection by fully utilizing it;
- ICMP packets are processed by different routines inside routers.
In addition to that TCP is built in a such a way it is constantly probing for available bandwidth, generally speaking by sending packets faster than a path can handle and then rolling back (this is what "TCP congestion control Collateral damage" is about).
OK, thanks for your answers Vlad! Дякую;)
Your Answer
Please start posting anonymously - your entry will be published after you log in or create a new account.
This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.
Comments
Please provide public access to the race, because now it demands log-in to be viewed.
Thanks, fixed that.