TCP stands for Transmission Control Protocol and is one of the core protocols of the Internet Protocol Suite. TCP complements the Internet Protocol (IP), and therefore the entire suite is commonly referred to as TCP/IP.

learn more… | top users | synonyms

4
votes
4answers
1k views

Is there a way to see what is actually filtering TCP port communication?

nmap -p 7000-7020 10.1.1.1 Will output all the filtered ports Starting Nmap 6.40 ( http://nmap.org ) at 2015-03-04 12:18 EET Nmap scan report for 10.1.1.1 Host is up (0.00091s latency). PORT ...
6
votes
4answers
3k views

apache webserver unresponsive with server-status showing all child processes waiting for connection

My setup: i have 3 nearly identical webserver machines serving the same high loaded dynamic website with simple load balancing over dns. The service has been working for over two years with the same ...
0
votes
1answer
68 views

How do I open specific ports on Linux (an AWS instance of RHEL v. 7)?

I'm using RedHat version 7. My AWS instances are in a security group with ample permissions for inbound connectivity. I can do Yum updates. The servers can ping each other. I can transfer files ...
3
votes
3answers
597 views

tcp-upstream in unbound doesn't work. Use TCP for query upstream DNS servers really work in the real world?

Today I've been playing with some options in unbound.conf just for fun. I've enabled tcp-upstream but it doesn't work with some domains. OS: OpenBSD current. Unbound: 1.4.19 Examples with ...
1
vote
3answers
1k views

HTTP not finishing over LAN. Hardware cause?

On a customer server running Apache 2.2 on Windows server 2012 we're noticing that from time to time, some requests to the server never finish. Using wireshark I've found a bunch of duplicate ACKs get ...
0
votes
0answers
29 views

TCP forwarding IIS

i have a server, let's call it: GATEWAY-SERVER (GS). On GS i installed a custom build TCP proxy/forwarder. This tool accepts connection TCP level and formulates a new request towards a TARGETSERVER ...
1
vote
1answer
791 views

Big IP orphaned connections

Let me state up-front that I know just enough about networking at this level to be dangerous, so if I say something stupid, please be kind. I am using a Big IP load balancer in front of 3 Apache ...
0
votes
1answer
22 views

SNORT only alerting on inbound traffic

I am trying to raise an alert when someone is setting up a connection to PORT 25 (tcp), whatever source or destination. For this i came up with this simple rule: alert tcp any any -> any 25 ...
0
votes
1answer
12 views

Windows Server 2008 sending regular TCP DNS requests to Forwarders

Our organization's primary DNS server is a Windows Server 2008 which two Forwarders set. I happened to notice on our firewall that this server is sending out regular TCP requests to the Forwarders in ...
3
votes
1answer
610 views

How to debug why WAN TCP/IP throughput is lower than expected?

I'm trying to figure out why tcp/ip throughput between two hosts I control is much lower than expected. Host A: internet connectivity provided by Comcast (Residential) in Boston Metro -- can ...
3
votes
1answer
147 views

(Why) does FreeBSD 'net.inet.tcp.always_keepalive' violate RFC1122?

While working on a server application that runs on FreeBSD and uses TCP, I noticed that TCP keepalive probes get sent even though my application explicitly disables SO_KEEPALIVE on TCP sockets. ...
3
votes
2answers
7k views

All connections from this network get stuck in SYN_RECV state, connections from my home or phone properly get ESTABLISHED

My server (a linode VPS) suddenly started to timeout on every request yesterday. I'm pretty inexperienced in networking and would love to learn a process for debugging these connectivity issues. ...
1
vote
1answer
8k views

Windows 7 default TCP connect timeout

Is there a way to change default TCP/IP new connection timeout ? In earlier Windows, timout value was stored in registry, as said here: Which is the default TCP connect timeout in Windows? But this ...
13
votes
4answers
48k views

Which is the default TCP connect timeout in Windows?

Which is the default TCP connect timeout in Windows? There is a registry key to configure it or it's set dynamically?
1
vote
3answers
215 views

Send TCP/IP packets down three routes and pick fastest

Does there exist a way to split TCP/IP traffic across three routes and have the first packets to reach the destination be used? I'm imagining something like multi-homing but with the requirement that ...
0
votes
1answer
31 views

length of Tcp segment exceed MSS

I find a weird behavior in my Linux system, when I curling a web page, the received TCP segments are significant larger THAN the MSS. here is the output of tcpdump: 00:00:00.000000 IP ...
0
votes
2answers
52 views

Get a website's host machine's OS/server software without access to the server

Is there a good methodology to find the operating system and server software that is being used on a served website that you don't have SSH access to? What I'm doing right now is looking at TCP/IP ...
1
vote
0answers
60 views

Multipath tcp application level performance measurement

I am working on a project related to Multipath tcp and I want to measure the goodput and the RTT at the application level. I don't want to use a traditional tool(netperf, iperf, ...) and I want to ...
2
votes
0answers
400 views

TCP connection timeouts that persist - listener queue backlog?

I have an app running on AIX 6.1 that has a single server process that listens for and polls tcp connections and simply forwards on messages to another process using an IPC message queue. It's been ...
4
votes
6answers
808 views

Effect of distance from server on page load speed

I measured the load speed of a static image file severed by nginx from my server (using pingdom service). The server should normally process this request within few seconds. My server is located in ...
0
votes
0answers
225 views

tcp connection reset [RST, ACK]

getting this errors looks like server is restating the connection because of some packet loss any possible suggestion's to figure out this 37713 591.925575000 ...
0
votes
0answers
138 views

Cisco ASA firewall blocking requests to internally hosted DNS server

I have a DNS server behind a Cisco ASA firewall. The Cisco firewall is performing NAT. When inside the network, I can NSLOOKUP directly to the server. When the client is external, requests time out. ...
-1
votes
1answer
49 views

How to redirect all incoming packets to sniffer in Linux using iptables?

I need to redirect all incoming tcp packets from eth0 to current host (change ip address from 1.1.1.1 to 1.1.1.2) and outgoing tcp packets from sniffer from eth1 to another host(from 2.2.2.2 to ...
0
votes
1answer
48 views

server is not responding on SYN packets

On the attached tcp dump, the first two SYN packets (#21800 and 21801) came to the server, however SYN ACK was sent for the second SYN. Is that correct behaviour? My understanding is that the client ...
0
votes
3answers
69 views

how to use tcpdump to log only certain data in real time

I'd like to monitor network interfaces but only log things likes errors, collisions and dropped packets. The send that to stdout. – Can tcpdump be configured to do this?
1
vote
2answers
280 views

Checkpoint FW1 logging

When I view the logs created for my checkpoint fw1, does it log connections on receiving the syn, or does it wait till the three way handshake completes? If it logs after the syn, is there anyway of ...
16
votes
3answers
11k views

What's the difference between Unix socket and TCP/IP socket?

It's from this answer: http://stackoverflow.com/questions/2482411/is-this-pdo-bug-fixed-now/2482424#2482424
2
votes
1answer
2k views

How to capture retransmitted packet info with tcpdump?

TCP retransmission rate on a host are often a good indicator of network problems. How do I find out the source and destination IPs for the packets that are being retransmitted? For context, on hosts ...
0
votes
0answers
34 views

PCI says port 36141:TCP is blocked. But 36141:TCP open on iptables

PCI compliant scan fails due to port 36141:TCP is being blocked on website. I verified I cannot connection via 36141 on same server to itself: # nc -zv 127.0.0.1 36141 nc: connect to 127.0.0.1 port ...
3
votes
1answer
476 views

Unix socket connection limit

This may appear like an already discussed/answered question. But I am specifically looking for info which I couldn't find anywhere answered clearly. I have an Nginx + php-fpm setup which uses unix ...
2
votes
0answers
47 views

Linux - Outgoing connections from process timeout after the process restarts

banging my head against the wall with this one... I have an Ubuntu Linux server, on top of which our own process which holds 40K persistent connections to external services. When the process ...
0
votes
1answer
114 views

Concurrent TCP connections on Azure can be upto 500K. Really?

Let me be very clear at the outset that I am new to cloud technology. All I know is cloud servers are easily scalable (i.e. adding physical hardware is transparent to applications and users) and ...
13
votes
4answers
68k views

What causes duplicate ACK records?

We're reviewing Wireshark captures from a few client machines that are showing multiple duplicate ACK records which then triggers retransmit and out-of-sequence packets. These are shown in the ...
0
votes
1answer
159 views

NetTcpPortSharing process won't start on Windows Server 2012 R2

I have a problem in Windows Server 2012 R2 : I have searched and try everything I know to fix this, but I cannot start NetTcpPortSharing service and therefore I cannot configure Windows Server ...
3
votes
0answers
166 views

TCP congestion collapse

I am experiencing suboptimal performance on an EC2 instance connecting to an RDS instance. This particular instance was built before VPC's existed, so all the traffic is flowing through a single ...
1
vote
1answer
135 views

Linux clients can't connect, server and TCP Windows Size / Timestamps issue

We have a problem that a number of clients (all linux Ubuntu) are sometimes not able to connect to a remote server over SSH. If the problem occurs, Windows clients don't have that problem and can ...
0
votes
4answers
8k views

netstat shows many times deploy.akamaitechnologies.com connected to my server

Many times, after running netstat on my server, I find one of IP addresses belonging to deploy.akamaitechnologies.com connected to my server, do someone has an idea on what is happening on my server ? ...
6
votes
2answers
750 views

Haproxy using 10GB Memory and 100% CPU with 50k connections

On a Ubuntu 14.04 x64 server, Haproxy uses 3.3 GB of memory and 6.8 GB of swap, while handling 52k connections. The CPU usage also keeps spiking to 100% before most of the traffic was redirected to ...
1
vote
0answers
25 views

Split TCP packet - Data layer vs IPv4Layer

What is the different between split TCP packet in the Data layer compare to split the packet in IPv4Layer ?
3
votes
0answers
273 views

TCP connection stuck in SYN_RECV state despite ACK received

My client and server are both internal machines. tcpdump on both client and server show all three parts of handshake are communicated, however netstat on server shows SYN_RECV, and on client shows ...
5
votes
1answer
147 views

POST of MTU + ~798 bytes gets lost

I have a very weird issue with certain packets not arriving on the destination host. It happens when we transmit a POST that is somewhat larger than the MTU. We can reproduce it with this script: ...
0
votes
0answers
238 views

HAProxy resetting backend connections

I'm in the process of setting up a series of servers as proxies to our application server, primarily to obscure the application server's IP as part of a suite of anti-DDOS measures. My goal is to ...
1
vote
1answer
926 views

TCP Zero Window with no corresponding Window Update

I am trying to debug a network issue and am using Wireshark and tcpdump to grab packets from my server. I have one client application that is grabbing all my available connections and then holding ...
0
votes
1answer
94 views

TCP packet loss against SQL-server

Where I work, we have had some issues with connections to the database. We get a lot of failures which appear as "recv failed" on the client side. I have used Wireshark to try to debug the problem and ...
0
votes
1answer
85 views

TCP: out of memory - Nginx

I'm running a high traffic site on a nginx server. Last fews days I'm having problems with my VPS locking up (unable to SSH, and nginx seems to be down). When I look in the logs I can see the ...
0
votes
0answers
70 views

Reverse proxy encrypted java traffic on non-standard TCP ports on Windows Server 2012 R2

I'm trying to find a software that will run on Windows Server 2012 R2 that can reverse proxy TCP traffic without caring about the layer 5-7 details. By reverse proxy, I mean the software needs to ...
0
votes
0answers
42 views

RHEL6.4 server did not send a SYN/ACK packet in response to a SYN packet from AppDirector intermittent

In my case, client access this RHEL6.4 server thought AppDirector, so the TCP connection is from AppDirector to the server. According to wireshark, sometimes, RHEL server didn't respond for the first ...
2
votes
1answer
134 views

TCP Upload Speeds Slow to the Internet over LFN

I've got two Linux VMs separated by a 50 mbps WAN connection. There is about 70ms of RTT on this WAN link, so it's got some latency. I've been testing my upload throughput to the Internet from each of ...
22
votes
6answers
20k views

Why would a server not send a SYN/ACK packet in response to a SYN packet

Lately, we've become aware of a TCP connection issue that is mostly limited to mac and Linux users who browse our websites. From the user perspective, it presents itself as a really long connection ...
1
vote
1answer
99 views

PHP-FPM TCP connections not terminating in time

I'm serving Wordpress pages via nginx/PHP5-FPM using APC caching (through the W3 Total Cache plugin). Nginx communicates with PHP-FPM via TCP sockets on port 9000. I've adjusted the number of max ...