TCP stands for Transmission Control Protocol and is one of the core protocols of the Internet Protocol Suite. TCP complements the Internet Protocol (IP), and therefore the entire suite is commonly referred to as TCP/IP.

learn more… | top users | synonyms

0
votes
1answer
140 views

Does ColdFusion use TCP Ports?

I am trying to access a link on our network. Whenever I try, the page times out. I have discovered that this link is a Adobe ColdFusion web page. Does ColdFusion use a TCP port other than port 80? I ...
0
votes
1answer
99 views

How to prevent TCP network flood triggered by KVM VPS clients?

How to to protect nodes/ detect and block KVM VPS clients that TCP flood the network ? I use SolusVM VPS management system. Recently one abuser toke several VPSs and flood it the datacenter network. ...
0
votes
0answers
180 views

How to fix the amount of bandwidth of iperf in tcp mode?

I'm working on some experiments about my master's degree project. I'm studying some load-balancers (I'm not supposed to cite them here) and the aim is to get for each bandwidth the cpu % usage of a ...
4
votes
2answers
695 views

TCP sequence number randomization

In a recent interview, my friend was asked about firewalls’ TCP sequence number randomization feature. The interviewer mentioned that we know that a firewall randomizes the TCP sequence number, but an ...
0
votes
0answers
81 views

what is the significance of URGENT POINTER in TCP Header?

Urgent Pointer: Used in conjunction with the URG control bit for priority data transfer. This field contains the sequence number of the last byte of urgent data. It is possible to identify the urgent ...
0
votes
1answer
481 views

Openvpn: no response from server in tcp handshake

I am attempting to connect to an openVPN server that I created on pfSense 2.2.3 by using tunnelblick on my Macbook. Whenever I attempt to connect using either OpenVPN version 2.3.6 or 2.3.7 (all that ...
0
votes
0answers
42 views

TCP traffic redirection

I am using an open source program called revinetd: revinetd.sourceforge.net On server side, revinet listens for incoming connections on a defined port to act as a relay server. Now, The server ...
1
vote
1answer
85 views

Tcp connection breaking, too fast for serial?

I've been having real difficulties getting a tcp connection to work with my web server. I think the issue might have something to do with the speed or ordering of the packets as the connection seems ...
0
votes
0answers
95 views

Why would Windows 7 not complete this TCP handshake?

One of our customers is running Windows 7, and cannot reach some of our servers because it seems Windows 7 cannot complete a TCP handshake. Here's a packet trace to one our servers -- note that a SYN ...
1
vote
0answers
77 views

Spurious retransmission, Dup ACK and HTTP 408

I have a server which serves as sms gateway (using kannel) and have multiple client connecting to it, but recently this one client with their particular IP said that they can't send to my server and ...
18
votes
4answers
90k views

What causes duplicate ACK records?

We're reviewing Wireshark captures from a few client machines that are showing multiple duplicate ACK records which then triggers retransmit and out-of-sequence packets. These are shown in the ...
1
vote
0answers
262 views

Citrix NetScaler sending FIN, ACK for SSL VPN Clients

I realise that it's unlikely anyone here has a definite "Check this box to resolve this" answer, but I'm struggling with this issue and I'm hoping that someone with more knowledge than me can give me ...
0
votes
1answer
150 views

TCP Keepalive: Why does an idled ESTABLISHED connection end after 60 seconds, instead of tcp_keepalive_time?

I am investigating ways to mitigate a server against DoS-type attacks. In one scenario, I've opened several hundred TCP connections to my webserver. I do not send any data after the initial TCP ...
0
votes
0answers
12 views

Route only on output chain?

I have two machines A and B. I want to send iperf traffic from A to B, but first have it route through a userspace program on A. I did this with a tunneling device: therefore, I used the command ip ...
5
votes
1answer
7k views

Unexpectedly shrunk window

I run a major media upload/download site and I noticed these: Is this serious or background noise due to the big file sizes and is there any tweaks I can add to /etc/sysctl.conf to improve and ...
1
vote
2answers
183 views

How to run Different congestion control algorithms in FEDORA 17?

I need to use different congestion control algorithms for tcp flow. How can I continue using those flow congestion algorithms from Fedora 11 in Fedora 17?
0
votes
0answers
106 views

SYN/ACK not received by iperf client?

I have an application that essentially consists of four components A, B, C, D. A and B are on the same machine - B and C are separate machines. Traffic is generated by an iperf client on A with a ...
5
votes
3answers
683 views

TCP sequence number

I would like to know if two segments of same sequence number arrive at the destination, which segment will get accepted ? For eg: A clients sends a packet to a server and wait for an ...
2
votes
3answers
4k views

Test a server using MTR through TCP

Is it possible to use MTR over TCP? If not is there an alternative? I have done some research and I am not finding any way to do such a thing, so I'm wondering if anyone has had any experience with ...
-1
votes
1answer
58 views

ufw status (what does the v6 stand for?)

My ufw status output looks like this: To Action From -- ------ ---- 22 ALLOW Anywhere 80/tcp ...
0
votes
0answers
65 views

Two processes stuck on network communication

We have had hang on our Oracle extraction process very intermittantly. Nothing obvious from the Oracle side, and starting to think it is more network related. There are two Oracle processes ...
1
vote
0answers
91 views

Debian limit number of TCP sockets for a process (especially tor) on OpenVZ

I have a debian 7.8 server, running on OpenVZ. On this server I'm running a tor relay and some other network services (like apache and mysql). However the tor service seems to eat up all my available ...
2
votes
0answers
55 views

Network sensor for a TCP connection for collecting statistics each second [closed]

I need a Network Sensor capable to gather basic end-to-end statistics (packet loss, jitter and network delay/RTT) of several TCP connections directed to the very same destination (ip-addr:port) on ...
27
votes
7answers
33k views

Why would a server not send a SYN/ACK packet in response to a SYN packet

Lately, we've become aware of a TCP connection issue that is mostly limited to mac and Linux users who browse our websites. From the user perspective, it presents itself as a really long connection ...
0
votes
0answers
80 views

rsyslog tcp packets containing multiple log messages

I have rsyslog receiving logs over udp and then relaying them over tcp to a load balance (nginx) which passes them along to SIEM collectors. The setup looks like this: network devices/appliances ...
1
vote
0answers
95 views

Should I disable the Nagle Algorithm for Outlook / Exchange RPC/HTTP communication?

I'm investigating reasons why several Outlook clients in non-cached mode are having delays communicating... resulting in Outlook hanging. My suspicion is that a Netscaler, or intermediate device (? ...
-1
votes
1answer
65 views

Can TCP be used like UDP by simply not sending ACK?

Assuming both client & server cooperated, could you emulate the functionality of UDP by not sending ACK packets, and not sending retransmissions? Or would most routers somehow bork the process if ...
0
votes
0answers
136 views

SSH stalled after a while

I am executing some commands over SSH from a linux client (centos 7) toward a server (wind river linux) and for a reason it always stopped ( not completed ). If i executed a command that take short ...
0
votes
1answer
116 views

REDSOCKS goes 'out of file descriptors' when trying to redirect all outgoing (TCP) traffic from my Linux machine

I'm trying to redirect all outgoing TCP traffic from my linux box to the remote SOCKS5 proxy server. Currently I'm using the following rule in the OUTPUT chain: sudo iptables -t nat -A OUTPUT -p tcp ...
1
vote
0answers
100 views

Web sites freeze after clicking link - unexplainable ACK packet

We have a sporadic problem accessing some internal links on websites. (Windows Firefox, Internet Explorer, Chrome) Behaviour On first clicking a link, the browser will load infinitely. The second ...
0
votes
0answers
103 views

How to properly configure security group at AWS?

I'm trying to reach my server's FTP-port by its Elastic IP. I've configured the security group as follows: Inbound Type Protocol Port Range Destination All traffic All All ...
0
votes
1answer
324 views

Private communications between AWS EC2 instances

I have three EC2 instances with elastic IPs. Each one contains a server. Each server needs that TCP ports 8181, 2181, 2888 and 3888 are opened on each machine. Each server should have the possibility ...
2
votes
0answers
995 views

No response to some SYN packets when timestamps are enabled

I have a TCP server listening on a machine ("the server") running Ubuntu 12.04.3 (kernel 3.8.0-31-generic). It receives connections from 2 different client machines. Machine A is running Ubuntu ...
0
votes
1answer
2k views

ffmpeg simple RTMP streaming

I am trying to launch up a rtmp transcoder server using ffmpeg; that receives udp MPEG-TS streams as input, transcodes it; and generates an rtmp output to a URL, that can be accessed by users to ...
-1
votes
1answer
71 views

TCP - MSS option and different payload

This is a tcpdump from servers side. In line 1 i see MSS=1400. Why server sent in line 6 a packet of 4230 bytes when client want max 1400?
14
votes
7answers
3k views

Why is it good practice to compare checksums when downloading a file?

Websites which supply ISO files for download will often give the md5 checksums of those files, which we can use to confirm that the file has downloaded correctly, and has not been corrupted. Why is ...
8
votes
2answers
5k views

Extreme UDP packet loss at 300Mbit (14%), but TCP > 800Mbit w/o retransmits

I have a linux box I use as the iperf3 client, testing 2 identically equipped Windows 2012 R2 server boxes with Broadcom BCM5721, 1Gb adapters (2 ports, but only 1 used for the test). All machines are ...
0
votes
1answer
527 views

Effects of IW10 (initcwnd 10 initrwnd 10) on high speed LAN based TCP/IP communications?

What does changing the number of packets sent during the initial congestion window to 10 have on LAN connections? Via: ip route change default via GATEWAY dev INTERFACE initcwnd 10 initrwnd 10 Is ...
0
votes
1answer
38 views

Upgrading Web Application's Systems' Kernels for IW10 & other related improvements - upgrade all machines? LB first? Most important?

Stackers - We're making the push to upgrade the systems for our web app to take advantage of the various TCP improvements becoming more readily available (e.g. ...
4
votes
1answer
484 views

Common back pressure strategies for services under sustained high load

I'm wondering what are the common backpressure strategies people use for their web services? Imagine your service operates under heavy load, and at some point the load reaches 120% of your capacity. ...
2
votes
1answer
66 views

Outgoing packet has NATed src address

Configuration/Topology: There are 3 machines hadoop2 | hadoop | driver eth0 10.10.15.3 | eth0 10.10.15.2 | tap0 192.168.0.199 ...
1
vote
1answer
145 views

No response to TCP SYN packet when padding is not 0's or F's

I have this client which initiates a 3 way handshake with a SYN packet but there is no SYN ACK response. We figured out that it was because the client did not pad the end of the TCP headers with 0's ...
1
vote
0answers
506 views

Nginx TCP Fast Open Issue

I have configured Nginx and Apache on one of my servers. The nginx server listens on port 80 and Apache on port 81. Nginx works as a reverse proxy. In nginx I configured TCP Fast Open: server { ...
1
vote
0answers
156 views

What happens if a machine gets a SYN/ACK packet without sending initial SYN packet?

I'm thinking of a situation where an attacker manipulates a SYN packet that was sent from A's source IP address to B. The server will receive the packet and think it's a legitimate packet, and send a ...
2
votes
1answer
449 views

Why do I get connection timeouts to private services in Azure?

I seem to be seeing this with both my SQL Server, and my MongoDB replica set. I only get a handful a day, but it still concerns me. I am getting a timeout when trying to open a new connection to the ...
-1
votes
1answer
425 views

Forwarding ports and traffic to VPN tunnel

I've installed OpenVPN on my VPS. I have one question: how to forward traffic going to that VPS to go to VPN tunnel created with my local PC. I will use TCP connection. The whole traffic will be like ...
6
votes
4answers
6k views

How do I check how many connections are open currently on a specific TCP port?

I'm doing some comet benchmarks and would like to see how many open connections I have. Actually I use netstat: netstat -ant | grep 8080 | grep EST | wc -l But it needs around 4-6 minutes to list ...
0
votes
1answer
179 views

ssh tunneling lmgrd port what I've missed?

I've got 2 machines: one local , one flexserver I'd like to do a ssh connection for forwarding the TCP port of the flexserver. On the flexserver, lmutil lmstat -c 5280@localhost is working fine So I ...
0
votes
0answers
544 views

massive amount of CLOSE_WAIT due nginx (lsof)

My VPS keeps hanging up every 5 days. I can see that the nginx worker processes are eating up my memory over time. I think this is due the massive amount of CLOSE_WAIT's open. When I type LSOF, I get ...
0
votes
1answer
148 views

How to ping a host with different MTU size to simulate icmpv6 packet too big scenario?

As the Title states,I want to check whether my host will actually send a ICMPv6 packet too big if i send a packet with beyond the defined MTU size.I don't have a cisco router(extended ping) to try out ...