TCP stands for Transmission Control Protocol and is one of the core protocols of the Internet Protocol Suite. TCP complements the Internet Protocol (IP), and therefore the entire suite is commonly referred to as TCP/IP.

learn more… | top users | synonyms

-1
votes
0answers
6 views

CirrOS server has ports filtered; its IP address pings but from a different IP address in the echo

nmap to a CirrOS server shows that ports 22 and 135 are filtered. On the CirrOS server, I can ssh to 127.0.0.1. I've noticed that pings to the CirrOS server return from an IP address different from ...
1
vote
0answers
19 views

CentOS appliance becomes unresponsive with lot of outgoing http connections [on hold]

I have an ESXi VM running CentOS-7. My application is deployed inside a tomcat instance running on this server. The application periodically makes 1200 "outgoing" http connections every 15secs. I am ...
3
votes
1answer
40 views

notify when a TCP port start listening

I need to be notified exactly when an application start LISTENING on any/specified TCP port. is there anything like configuring an application to log this event using a library in any programming ...
0
votes
0answers
12 views

Should I change the value of TcpTimedWaitDelay after increasing the MaxUserPort's value?

I have Apache running on Windows 2008 R2. I had an issue where my Windows Server is reaching maxing outbound TCP connection which caused many connections to be interrupted and my application started ...
-1
votes
1answer
29 views

Server 2012 R2 TCP Timestamps

We will be having some penetration testing performed shortly and looking to clean up a few things. One of these is TCP timstamps in Windows. A simiple NMAP scan shows me a guess of the TCP timestamp ...
-4
votes
1answer
19 views

Why is the same socket in TIME_WAIT many times?

I have read other threads regarding sockets in TIME_WAIT, but I am clearly still missing something. Below is a few lines from a "netstat -an". How could it get into this situation? If I understood ...
0
votes
1answer
25 views

Send proper UUID over tcp

I have a small ingest TCP server that should accept a device UUID as a first message, which is only 16 bytes. I'd like to test this manually from terminal, but sending a string won't work, since it ...
-1
votes
1answer
27 views

Is “keeping alive connections” the smartest approach to access devices behind a router? [closed]

The problem I'm developing an IOT device that will connect to a common Wifi router. As you know in order to make this device publicly accessible from WAN you'll have to do some ports forwarding or ...
1
vote
0answers
41 views

tcp previous segment not captured when NAT

I have a client request web service on a server behide NAT. My client IP is 10.54.10.193 NAT address: 10.54.28.183 Server address: 62.209.39.203 When client request web service on server we have TCP ...
1
vote
2answers
25 views

Keeping TCP connections alive to track which clients are online

I am developing an application where a server needs to stay in touch with lots of simple IoT devices. Nearly no information exchange is needed between the server and each device, but devices need to ...
0
votes
0answers
33 views

Inconsistency in TCP and HTTP connection management

I observe following scenario in WireShark: The problem I see here is that after receiving [FIN, ACK] from server (4090) and acknowledging it (4092), http client attempts to send another HTTP ...
1
vote
1answer
56 views

Packets being routed to the wrong IP

Looked around, can't find a similar issue anywhere... I have been having some very strange and hard to explain problems on my network lately, and in my efforts to find the cause, I came across an ...
1
vote
0answers
18 views

What exactly constitutes a bad TCP segment?

What constitutes a bad segment as in bad segments received in the netstat output below? I would think a TCP header's checksum could do it, but are there other things? If a segment arrives after its ...
2
votes
1answer
44 views

(Completely) randomize IP addresses in PCAP file

I have several PCAP files which contain network traffic. To perform some experiments for a network experiment, I need real data with completely randomized IP addresses. I am well aware about the ...
-1
votes
1answer
49 views

Configure Squid Proxy Server to use TCP for DNS lookups? [closed]

Is there a way to configure squid 3.5.1 to use TCP for DNS lookups? I've setup up the proxy server to use TCP for lookups by adding "options tcp" to my /etc/resolv.conf, but squid seems to be doing ...
0
votes
1answer
52 views

Nginx Configuration:504 Gateway Time-out error

We are using Nginx as a Load balancer. Nginx having IP address of :10.110.0.200 and address of host machines are 10.110.3.20|10.110.3.21 this is the configuration file: upstream test1 { server ...
1
vote
1answer
51 views

Is it possible to run 2 concurrent tcpdump with different options?

I need to run 2 concurrent tcpdump commands with different arguments/options. Why ? Because we wrote some long long scripts compatible with following options : tcpdump -ixenbr0 -s 400 -n -A 'port sip ...
3
votes
0answers
76 views

Does Fast Retransmit and Retransmission Timer work at the same time?

When Fast Retransmit is implemented, if I received packet 1, then I will send an ACK that says I need packet 2, and then if I received packet 3, I will send a duplicate ACK that says that I need ...
0
votes
0answers
11 views

Why is server refusing new connections?

One of our proprietary closed source server applications sometimes stops accepting new connection from remote nodes on its server port. Remote nodes that are already connected work fine. Any new ...
1
vote
1answer
82 views

Millions of TCP FIN-ACK retransmissions blocking traffic on my desktop machine

In a few minutes I have received about 7 millions(!) FIN-ACK packets from IP address that belongs to Google 74.125.133.188 what totally blocked network traffic on my desktop(!) machine. Other ...
1
vote
0answers
17 views

What technology do data center use to guarantee low RTT?

I was reading about data-center-tcp DCTCP and the paper was talking about the low retransmission timer (RTT) of about 250µs, but didn't state how that is being done. Somewhere else I read that DCTCP ...
0
votes
1answer
44 views

Does ColdFusion use TCP Ports?

I am trying to access a link on our network. Whenever I try, the page times out. I have discovered that this link is a Adobe ColdFusion web page. Does ColdFusion use a TCP port other than port 80? I ...
0
votes
0answers
18 views

Can I use MS Host Integration Server to connect to an IBM without using SNA

I'm sorry, this will represent a lot of information, but I'd like to avoid some of the back and forth I'm having with various forums trying to resolve this issue. So please, bear with me. I've taken ...
0
votes
0answers
38 views

better alternative for tcp_syncookies in linux

In an effort to prevent DDOS attacks I followed suggestions to leave /proc/sys/net/ipv4/tcp_syncookies value set to 1 in my linux box to enable TCP syncookies. However, when I look at this URL: ...
0
votes
1answer
148 views

Slow Upload to IIS Server

I have a Windows 2012 R2 Server running on an Amazon EC2 instance with IIS 8.5. It hosts a web application, and a custom WebDAV server that interacts with the same database as the web application. I ...
0
votes
0answers
53 views

How to fix the amount of bandwidth of iperf in tcp mode?

I'm working on some experiments about my master's degree project. I'm studying some load-balancers (I'm not supposed to cite them here) and the aim is to get for each bandwidth the cpu % usage of a ...
0
votes
1answer
46 views

How to prevent TCP network flood triggered by KVM VPS clients?

How to to protect nodes/ detect and block KVM VPS clients that TCP flood the network ? I use SolusVM VPS management system. Recently one abuser toke several VPSs and flood it the datacenter network. ...
2
votes
1answer
189 views

lsof doesn't show the established TCP connection

On my system, if I run the netstat for a port, it returns: $ netstat -nat | grep "60964" tcp 0 0 192.0.0.1:60964 0.0.0.0:* LISTEN tcp 59 0 ...
2
votes
2answers
123 views

TCP sequence number randomization

In a recent interview, my friend was asked about firewalls’ TCP sequence number randomization feature. The interviewer mentioned that we know that a firewall randomizes the TCP sequence number, but an ...
0
votes
0answers
17 views

what is the significance of URGENT POINTER in TCP Header?

Urgent Pointer: Used in conjunction with the URG control bit for priority data transfer. This field contains the sequence number of the last byte of urgent data. It is possible to identify the urgent ...
0
votes
0answers
21 views

TCP traffic redirection

I am using an open source program called revinetd: revinetd.sourceforge.net On server side, revinet listens for incoming connections on a defined port to act as a relay server. Now, The server ...
0
votes
1answer
68 views

Openvpn: no response from server in tcp handshake

I am attempting to connect to an openVPN server that I created on pfSense 2.2.3 by using tunnelblick on my Macbook. Whenever I attempt to connect using either OpenVPN version 2.3.6 or 2.3.7 (all that ...
1
vote
1answer
49 views

Tcp connection breaking, too fast for serial?

I've been having real difficulties getting a tcp connection to work with my web server. I think the issue might have something to do with the speed or ordering of the packets as the connection seems ...
0
votes
0answers
49 views

Why would Windows 7 not complete this TCP handshake?

One of our customers is running Windows 7, and cannot reach some of our servers because it seems Windows 7 cannot complete a TCP handshake. Here's a packet trace to one our servers -- note that a SYN ...
1
vote
0answers
29 views

Spurious retransmission, Dup ACK and HTTP 408

I have a server which serves as sms gateway (using kannel) and have multiple client connecting to it, but recently this one client with their particular IP said that they can't send to my server and ...
1
vote
0answers
77 views

Citrix NetScaler sending FIN, ACK for SSL VPN Clients

I realise that it's unlikely anyone here has a definite "Check this box to resolve this" answer, but I'm struggling with this issue and I'm hoping that someone with more knowledge than me can give me ...
0
votes
1answer
46 views

TCP Keepalive: Why does an idled ESTABLISHED connection end after 60 seconds, instead of tcp_keepalive_time?

I am investigating ways to mitigate a server against DoS-type attacks. In one scenario, I've opened several hundred TCP connections to my webserver. I do not send any data after the initial TCP ...
0
votes
0answers
12 views

Route only on output chain?

I have two machines A and B. I want to send iperf traffic from A to B, but first have it route through a userspace program on A. I did this with a tunneling device: therefore, I used the command ip ...
0
votes
0answers
32 views

SYN/ACK not received by iperf client?

I have an application that essentially consists of four components A, B, C, D. A and B are on the same machine - B and C are separate machines. Traffic is generated by an iperf client on A with a ...
4
votes
3answers
592 views

TCP sequence number

I would like to know if two segments of same sequence number arrive at the destination, which segment will get accepted ? For eg: A clients sends a packet to a server and wait for an ...
-1
votes
1answer
29 views

ufw status (what does the v6 stand for?)

My ufw status output looks like this: To Action From -- ------ ---- 22 ALLOW Anywhere 80/tcp ...
0
votes
0answers
37 views

Two processes stuck on network communication

We have had hang on our Oracle extraction process very intermittantly. Nothing obvious from the Oracle side, and starting to think it is more network related. There are two Oracle processes ...
1
vote
0answers
49 views

Debian limit number of TCP sockets for a process (especially tor) on OpenVZ

I have a debian 7.8 server, running on OpenVZ. On this server I'm running a tor relay and some other network services (like apache and mysql). However the tor service seems to eat up all my available ...
2
votes
0answers
35 views

Network sensor for a TCP connection for collecting statistics each second [closed]

I need a Network Sensor capable to gather basic end-to-end statistics (packet loss, jitter and network delay/RTT) of several TCP connections directed to the very same destination (ip-addr:port) on ...
0
votes
0answers
38 views

rsyslog tcp packets containing multiple log messages

I have rsyslog receiving logs over udp and then relaying them over tcp to a load balance (nginx) which passes them along to SIEM collectors. The setup looks like this: network devices/appliances ...
1
vote
0answers
37 views

Should I disable the Nagle Algorithm for Outlook / Exchange RPC/HTTP communication?

I'm investigating reasons why several Outlook clients in non-cached mode are having delays communicating... resulting in Outlook hanging. My suspicion is that a Netscaler, or intermediate device (? ...
-1
votes
1answer
40 views

Can TCP be used like UDP by simply not sending ACK?

Assuming both client & server cooperated, could you emulate the functionality of UDP by not sending ACK packets, and not sending retransmissions? Or would most routers somehow bork the process if ...
0
votes
0answers
46 views

SSH stalled after a while

I am executing some commands over SSH from a linux client (centos 7) toward a server (wind river linux) and for a reason it always stopped ( not completed ). If i executed a command that take short ...
0
votes
1answer
39 views

REDSOCKS goes 'out of file descriptors' when trying to redirect all outgoing (TCP) traffic from my Linux machine

I'm trying to redirect all outgoing TCP traffic from my linux box to the remote SOCKS5 proxy server. Currently I'm using the following rule in the OUTPUT chain: sudo iptables -t nat -A OUTPUT -p tcp ...
1
vote
0answers
46 views

Web sites freeze after clicking link - unexplainable ACK packet

We have a sporadic problem accessing some internal links on websites. (Windows Firefox, Internet Explorer, Chrome) Behaviour On first clicking a link, the browser will load infinitely. The second ...