Our 2008 server began to work very slowly within 2 weeks. Our web sites (iis 7.5) are loading very slowly and sometimes its freezing. We began testing with wireshark and saw that our packets are lost during transmission. The client demands the same packets several times, please check below.
(CLIENT): 11 3.492500 Client Server TCP 54 61220 > http [ACK] Seq=316 Ack=5521 Win=66240 Len=0 (SERVER) : 12 3.495204 Server Client TCP 1434 [TCP Previous segment lost] [TCP segment of a reassembled PDU]
(CLIENT):13 3.495225 Client Server TCP 66 [TCP Dup ACK 11#1] 61220 > http [ACK] Seq=316 Ack=5521 Win=66240 Len=0 SLE=6901 SRE=8281
****(SERVER) :***14 3.604038 Server Client TCP 1434 [TCP segment of a reassembled PDU]
**(CLIENT):***15 3.604062 Client Server TCP 66 [TCP Dup ACK 11#2] 61220 > http [ACK] Seq=316 Ack=5521 Win=66240 Len=0 SLE=6901 SRE=9661
**(SERVER) :***16 3.606074 Server Client TCP 1434 [TCP Previous segment lost] [TCP segment of a reassembled PDU] ...
**(CLIENT):***23 3.714810 Client Server TCP 74 [TCP Dup ACK 11#6] 61220 > http [ACK] Seq=316 Ack=5521 Win=66240 Len=0 SLE=11041 SRE=16561 SLE=6901 SRE=9661
**(SERVER) :***24 3.718211 Server Client TCP 1434 [TCP Fast Retransmission] [TCP segment of a reassembled PDU]
We cehcked the frames in detail and saw that majority of the errors are "IP checksum offload errors" . when we disable "Checksum offload" from our network adapter, then we began to receive lots of "suspected transmission" and server is still slow. Interesting thing is in one of our IP's in our server we are not receiving this error, and the web sites using that IP is rapid enough.
Do you have any idea what is going on?