THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.

Revision history  [back]

retransmissions in our network

Good morning wiresharkers,

I am new to some of this and am currently taking my CCNA so please educate me.

Long story short, we have some delay in AD and printer scripts, which has led me to dig into other areas of our system, and its complicated as it has grown. From vmware to blades to flex fabric. So I am kind of in the middle of a long troubleshooting experience.

We have a trunk line, that I found with no LACP active and we turned that on yesterday, we are getting roughly 100k drops on a this trunk per day (according to solar winds, and a sho int bri on the switch). Today I pulled a pcap, and the retransmission's are more than 10 times what we saw before we turned on LACP. I was hopping that this would be less. Drops seem to be the same.

I have a pcap from the line coming into the switch from another segment of the network, and this is clean. I have a pcap from the trunks going into our blade chassis and these are clean. The pcap in question is a trunk line from a 5412zl switch to a Palo alto 3020, using aggregate links.

I want to reduce the drops, and the retransmissions on this trunk. Perhaps this will speed things up.

Trunk 2 2x 2 1g eth lines from 5412zl to Palo Alto 1 Trunk 3 2x 2 1g eth lines from 5412zl to Palo Alto 2 (standby) Trunk 5, 2x 40gig links active\active from 5412zl to Flex Fabric A Trunk 6 2x 40 gig links active\active from 5412zl to Flex Fabric B Spanning tree is turned on on the 5412zl Spanning tree is not supported by the flex fabric units

---------------------------------------------------'DATA-------------------------------

82 0.006557 10.10.80.19 10.100.100.239 TCP 143 [TCP Retransmission] 60989 → 3389 [PSH, ACK] Seq=1 Ack=1 Win=253 Len=85

83 0.006597 10.100.100.245 10.100.110.44 TCP 382 [TCP Retransmission] 445 → 53706 [PSH, ACK] Seq=357 Ack=809 Win=508 Len=324


92 0.007847 10.100.140.3 10.100.100.250 TCP 58 [TCP Dup ACK 91#1] 44818 → 3487 [ACK] Seq=449 Ack=55 Win=8138 Len=0

I cant post files yet.

retransmissions in our network

Good morning wiresharkers,

I am new to some of this and am currently taking my CCNA so please educate me.

Long story short, we have some delay in AD and printer scripts, which has led me to dig into other areas of our system, and its complicated as it has grown. From vmware to blades to flex fabric. So I am kind of in the middle of a long troubleshooting experience.

We have a trunk line, that I found with no LACP active and we turned that on yesterday, we are getting roughly 100k drops on a this trunk per day (according to solar winds, and a sho int bri on the switch). Today I pulled a pcap, and the retransmission's are more than 10 times what we saw before we turned on LACP. I was hopping that this would be less. Drops seem to be the same.

I have a pcap from the line coming into the switch from another segment of the network, and this is clean. I have a pcap from the trunks going into our blade chassis and these are clean. The pcap in question is a trunk line from a 5412zl switch to a Palo alto 3020, using aggregate links.

I want to reduce the drops, and the retransmissions on this trunk. Perhaps this will speed things up.

Trunk 2 2x 2 1g eth lines from 5412zl to Palo Alto 1 Trunk 3 2x 2 1g eth lines from 5412zl to Palo Alto 2 (standby) Trunk 5, 2x 40gig links active\active from 5412zl to Flex Fabric A Trunk 6 2x 40 gig links active\active from 5412zl to Flex Fabric B Spanning tree is turned on on the 5412zl Spanning tree is not supported by the flex fabric units

---------------------------------------------------'DATA-------------------------------

82 0.006557 10.10.80.19 10.100.100.239 TCP 143 [TCP Retransmission] 60989 → 3389 [PSH, ACK] Seq=1 Ack=1 Win=253 Len=85

83 0.006597 10.100.100.245 10.100.110.44 TCP 382 [TCP Retransmission] 445 → 53706 [PSH, ACK] Seq=357 Ack=809 Win=508 Len=324


92 0.007847 10.100.140.3 10.100.100.250 TCP 58 [TCP Dup ACK 91#1] 44818 → 3487 [ACK] Seq=449 Ack=55 Win=8138 Len=0

I cant post files yet.

retransmissions in our network

Good morning wiresharkers,

I am new to some of this and am currently taking my CCNA so please educate me.

Long story short, we have some delay in AD and printer scripts, which has led me to dig into other areas of our system, and its complicated as it has grown. From vmware to blades to flex fabric. So I am kind of in the middle of a long troubleshooting experience.

We have a trunk line, that I found with no LACP active and we turned that on yesterday, we are getting roughly 100k drops on a this trunk per day (according to solar winds, and a sho int bri on the switch). Today I pulled a pcap, and the retransmission's are more than 10 times what we saw before we turned on LACP. I was hopping that this would be less. Drops seem to be the same.

I have a pcap from the line coming into the switch from another segment of the network, and this is clean. I have a pcap from the trunks going into our blade chassis and these are clean. The pcap in question is a trunk line from a 5412zl switch to a Palo alto 3020, using aggregate links.

I want to reduce the drops, and the retransmissions on this trunk. Perhaps this will speed things up.

Trunk 2 2x 2 1g eth lines from 5412zl to Palo Alto 1 Trunk 3 2x 2 1g eth lines from 5412zl to Palo Alto 2 (standby) Trunk 5, 2x 40gig links active\active from 5412zl to Flex Fabric A Trunk 6 2x 40 gig links active\active from 5412zl to Flex Fabric B Spanning tree is turned on on the 5412zl Spanning tree is not supported by the flex fabric units

---------------------------------------------------'DATA-------------------------------

82 0.006557 10.10.80.19 10.100.100.239 TCP 143 [TCP Retransmission] 60989 → 3389 [PSH, ACK] Seq=1 Ack=1 Win=253 Len=85

Len=85 83 0.006597 10.100.100.245 10.100.110.44 TCP 382 [TCP Retransmission] 445 → 53706 [PSH, ACK] Seq=357 Ack=809 Win=508 Len=324

I cant post files yet.

retransmissions in our network

Good morning wiresharkers,

I am new to some of this and am currently taking my CCNA so please educate me.

Long story short, we have some delay in AD and printer scripts, which has led me to dig into other areas of our system, and its complicated as it has grown. From vmware to blades to flex fabric. So I am kind of in the middle of a long troubleshooting experience.

We have a trunk line, that I found with no LACP active and we turned that on yesterday, we are getting roughly 100k drops on a this trunk per day (according to solar winds, and a sho int bri on the switch). Today I pulled a pcap, and the retransmission's are more than 10 times what we saw before we turned on LACP. I was hopping that this would be less. Drops seem to be the same.

I have a pcap from the line coming into the switch from another segment of the network, and this is clean. I have a pcap from the trunks going into our blade chassis and these are clean. The pcap in question is a trunk line from a 5412zl switch to a Palo alto 3020, using aggregate links.

I want to reduce the drops, and the retransmissions on this trunk. Perhaps this will speed things up.

Trunk 2 2x 2 1g eth lines from 5412zl to Palo Alto 1 Trunk 3 2x 2 1g eth lines from 5412zl to Palo Alto 2 (standby) Trunk 5, 2x 40gig links active\active from 5412zl to Flex Fabric A Trunk 6 2x 40 gig links active\active from 5412zl to Flex Fabric B Spanning tree is turned on on the 5412zl Spanning tree is not supported by the flex fabric units

---------------------------------------------------'DATA-------------------------------

82 0.006557 10.10.80.19 10.100.100.239 TCP 143 [TCP Retransmission] 60989 → 3389 [PSH, ACK] Seq=1 Ack=1 Win=253 Len=85 83 0.006597 10.100.100.245 10.100.110.44 TCP 382 [TCP Retransmission] 445 → 53706 [PSH, ACK] Seq=357 Ack=809 Win=508 Len=324

I cant post files yet.