Hot Downloads

Welcome, Guest
Username: Password: Remember me

TOPIC: TCP Out of Order Packets

TCP Out of Order Packets 10 years 1 month ago #17452

  • Amit17
  • Amit17's Avatar
  • Offline
  • New Member
  • Posts: 1
  • Karma: 0
Hi Guys,

I need help decoding a trace. I am seeing lot of tcp OOO, TCP Dup Acks, TCP Previous Segment Lost. Ocassionally, I am seeing TCP Window Update. I am spanning the entire Vlan on a Cisco 6K. So I understand, I will see Duplicate Acks, as my span port is seeing it twice. But how do I explain rest of the messages? Thanks in advance for your help.
The administrator has disabled public write access.

Re: TCP Out of Order Packets 10 years 1 month ago #17463

  • Smurf
  • Smurf's Avatar
  • Offline
  • Moderator
  • Posts: 1390
  • Karma: 1
Had similar issues with this when i did the same thing. It was caused by me spanning the whole VLAN for transmit/receive packets which were screwing the results up.

What does happen when you just span the vlan with one transmit or receive instead of both ?

I do have an article that i get e-mailed to me explaining something which i cannot remember (it was when i raised a TAC with our suppliers). I will try and remember to dig it out when i am in the office

Cheers
Wayne Murphy
Firewall.cx Team Member
www.firewall.cx

Now working for a Security Company called Sec-1 Ltd in the UK, for any
Penetration Testing work visit www.sec-1.com or PM me for details.
The administrator has disabled public write access.

Re: TCP Out of Order Packets 9 years 10 months ago #19421

  • pburdine
  • pburdine's Avatar
  • Offline
  • New Member
  • Posts: 1
  • Karma: 0
Did you ever find that article? I am running into a very similar issue here and would like to see it.

Thanks
The administrator has disabled public write access.

Re: TCP Out of Order Packets 9 years 10 months ago #19422

  • Smurf
  • Smurf's Avatar
  • Offline
  • Moderator
  • Posts: 1390
  • Karma: 1
Hehe, knew there was something i needed to do;

Click here here
Wayne Murphy
Firewall.cx Team Member
www.firewall.cx

Now working for a Security Company called Sec-1 Ltd in the UK, for any
Penetration Testing work visit www.sec-1.com or PM me for details.
The administrator has disabled public write access.
Time to create page: 0.078 seconds

CCENT/CCNA

Cisco Routers

  • SSL WebVPN
  • Securing Routers
  • Policy Based Routing
  • Router on-a-Stick

VPN Security

  • Understand DMVPN
  • GRE/IPSec Configuration
  • Site-to-Site IPSec VPN
  • IPSec Modes

Cisco Help

  • VPN Client Windows 8
  • VPN Client Windows 7
  • CCP Display Problem
  • Cisco Support App.

Windows 2012

  • New Features
  • Licensing
  • Hyper-V / VDI
  • Install Hyper-V

Linux

  • File Permissions
  • Webmin
  • Groups - Users
  • Samba Setup