TCP stands for Transmission Control Protocol and is one of the core protocols of the Internet Protocol Suite. TCP complements the Internet Protocol (IP), and therefore the entire suite is commonly referred to as TCP/IP.

learn more… | top users | synonyms

4
votes
0answers
340 views

TCP Window Scaling Problem over MPLS

After extensive troubleshooting why the TCP speed over an MPLS circuit is slow in one direction, I figured out that by adjusting the TCP window size the situation improved a lot. Maybe you can tell me ...
4
votes
0answers
341 views

TCP congestion collapse

I am experiencing suboptimal performance on an EC2 instance connecting to an RDS instance. This particular instance was built before VPC's existed, so all the traffic is flowing through a single ...
4
votes
0answers
511 views

TCP connection stuck in SYN_RECV state despite ACK received

My client and server are both internal machines. tcpdump on both client and server show all three parts of handshake are communicated, however netstat on server shows SYN_RECV, and on client shows ...
4
votes
0answers
402 views

snmp MIB-TCP::tcp not showing any usage

I am trying to configure MRTG on all of my servers for making a network weathermap, this requires running SNMP which MRTG gets the information from. So, I installed it on two servers the exact same ...
3
votes
0answers
31 views

TCP buffer sizes and ethernet bonding

(This question was originally posted on stack overflow; Andy told me that I could get faster help here, so it is re-posted here now.) I am experimenting with TCP buffer size tuning on Linux, but ...
3
votes
0answers
79 views

Does Fast Retransmit and Retransmission Timer work at the same time?

When Fast Retransmit is implemented, if I received packet 1, then I will send an ACK that says I need packet 2, and then if I received packet 3, I will send a duplicate ACK that says that I need ...
3
votes
0answers
673 views

What does “connections reset due to unexpected data” in netstat -s mean

I'm running a memcached server under heavy load from multiple web servers. While investigating some odd app level behaviour, we spotted that netstat -s on the memcached box was showing a lot of ...
3
votes
0answers
670 views

TCP connections in FIN-WAIT-2 state on linux not timing out according to tcp_fin_timeout

We run a service with lots of embedded devices in the field, their tcp stack is a bit buggy and sometimes does not close connections properly, resulting in some connections being stuck in FIN-WAIT-2 ...
3
votes
0answers
9k views

ksoftirqd process overloads CPU with high-bandwidth and multiple network connections

I got a 10GBit Server with proxmox 2.1 installed. There's an OpenVZ container running with Ubuntu 10.04 64bit. I can get 200-300MB/sec with wget from data-center internal servers (-O /dev/null) which ...
2
votes
0answers
74 views

How to change tcp's window size?

I've tried changing the tcp's window size by modifying net.ipv4.tcp_wmem and net.ipv4.tcp_rmem values, however the changes which I make have no effect on actual window size which I can check using a ...
2
votes
0answers
123 views

Why is SQL Server using all ephemeral ports connecting to itself and causing TIME_WAITs?

I've got an AWS server with Windows 2008 R2, SQL Server 2012, and Tomcat 7. When I run netstat -ano the screen is flooded with TIME_WAIT. I posted the output in a Gist. When I run CurrPorts, filter ...
2
votes
0answers
92 views

Linux - Outgoing connections from process timeout after the process restarts

banging my head against the wall with this one... I have an Ubuntu Linux server, on top of which our own process which holds 40K persistent connections to external services. When the process ...
2
votes
0answers
571 views

TCP Connection Issue Between Linux Machine and VMWare Windows Server

I have a TCP connection issue as follows. The setup: VMWare Virtual Machine: Windows Server 2008 R2 DataCenter SP1, IP: 192.168.2.111, DG: 192.168.2.254 Host Machine: Windows 7 Professional SP1, IP: ...
2
votes
0answers
756 views

TCP connection timeouts that persist - listener queue backlog?

I have an app running on AIX 6.1 that has a single server process that listens for and polls tcp connections and simply forwards on messages to another process using an IPC message queue. It's been ...
2
votes
0answers
866 views

No response to some SYN packets when timestamps are enabled

I have a TCP server listening on a machine ("the server") running Ubuntu 12.04.3 (kernel 3.8.0-31-generic). It receives connections from 2 different client machines. Machine A is running Ubuntu ...
2
votes
0answers
918 views

Should I set rto_min for a route inside data center?

We have a few dedicated server rented in a data center with debian 7, kernel 3.2. We use one of those servers as a database server. The network between our application server and database server is ...
2
votes
0answers
906 views

mysql client can't read query result?

So I have this machine running an XMPP server which connects to its MySQL database. When I start load-testing it, all goes fine up until after about 500s when I notice: Caused by: ...
2
votes
0answers
259 views

what can put linux process managing connection pool into bad state, so it restarts them continously?

I have an application with pool of connections to MySQL. At some point, in production, every 1-3 seconds some socket is closed. As a result my app restarts this connection. This is pretty big pool ...
2
votes
0answers
116 views

Tcp window size won't go above 130048

I have 2 servers set up with about 80ms latency between them. Both are centos 6 and run a java app that transfers data from on location to another. Both are on 1gbps connections. I have been trying ...
2
votes
0answers
632 views

haproxy tcp transparent mode on the same box as service

I'd like to set up transparent HA Proxy for TCP protocol. It works flawlessly when HA Proxy is in front of the boxes that are running the service. But when I try to set up HA Proxy in transparent mode ...
2
votes
0answers
345 views

A tool to measure overhead of establishing TCP connections

I need a tool which would while doing port forwarding measure how much time was spent establishing TCP connections vs total time passed. Charles debugging proxy has the port forwarding feature and ...
2
votes
0answers
1k views

In Windows 2008R2 there is a TCP port that is stuck LISTENING but the process that has it open is terminated?

I have a program, NC_net that allows Nagios to monitor Windows machines for various metrics and it seems to have caused a sporadic issue where when the service stops, the TCP port remains open. The ...
1
vote
0answers
36 views

Server socket sitting in FIN_WAIT_1 whilst network doesn't see its traffic

We've been trying to get a grip on a really weird problem where we can wget a page from Apache 2.2.19 on solaris 10 and some permutations of requests reliably take various fixed lengths of time to ...
1
vote
0answers
12 views

Iperf Tcp Client and Server

I'd really like to know why the bandwith in the client is higher than the server, i can´t find the answer explaining why this happens. Thank you, Tiago Melancia Values of the bandwidth: Client ...
1
vote
0answers
39 views

Can iptables log all type of tcp connection?

Can iptables log tcp Split-Handshake and Simultaneous-Open connections as well as tcp Three Way Handshake? Here is these two kind of tcp connection descriptions. Here I find how to log new tcp ...
1
vote
0answers
85 views

Apache timeouts and TCP retransmission

The documentation for the timeout directive in apache states that: When writing data to the client, the length of time to wait for an acknowledgement of a packet if the send buffer is full. But ...
1
vote
0answers
24 views

Why might a connection stay in TIME_WAIT for hours or even days?

Our environment is ubuntu 12.04 on EC2. I know TIME_WAIT is a good thing, and I know generally it's OK to see connections remain in TIME_WAIT for up to 2 minutes according to all the reading I've ...
1
vote
0answers
33 views

TCP Syn cookies is it always turned on when enabled?

For Linux kernel 2.6.32 if I set net.ipv4.tcp_syncookies = 1 will that be always used or only during a SYN flood attack? I found 2 sources which says the opposite. 1: "There are, however, two ...
1
vote
0answers
72 views

Wireshark RST against TCP Zero Window

During application sharing with Microsoft Lync Client (Mac OS X), TCP ACK with RST flag is sent from my application end to Lync end against TCP Zero Window packets and call gets dropped. Image Link. ...
1
vote
0answers
101 views

tcp previous segment not captured when NAT

I have a client request web service on a server behide NAT. My client IP is 10.54.10.193 NAT address: 10.54.28.183 Server address: 62.209.39.203 When client request web service on server we have TCP ...
1
vote
0answers
91 views

Inconsistency in TCP and HTTP connection management

I observe following scenario in WireShark: The problem I see here is that after receiving [FIN, ACK] from server (4090) and acknowledging it (4092), http client attempts to send another HTTP ...
1
vote
0answers
55 views

What exactly constitutes a bad TCP segment?

What constitutes a bad segment as in bad segments received in the netstat output below? I would think a TCP header's checksum could do it, but are there other things? If a segment arrives after its ...
1
vote
0answers
27 views

What technology do data center use to guarantee low RTT?

I was reading about data-center-tcp DCTCP and the paper was talking about the low retransmission timer (RTT) of about 250µs, but didn't state how that is being done. Somewhere else I read that DCTCP ...
1
vote
0answers
60 views

Spurious retransmission, Dup ACK and HTTP 408

I have a server which serves as sms gateway (using kannel) and have multiple client connecting to it, but recently this one client with their particular IP said that they can't send to my server and ...
1
vote
0answers
210 views

Citrix NetScaler sending FIN, ACK for SSL VPN Clients

I realise that it's unlikely anyone here has a definite "Check this box to resolve this" answer, but I'm struggling with this issue and I'm hoping that someone with more knowledge than me can give me ...
1
vote
0answers
75 views

Debian limit number of TCP sockets for a process (especially tor) on OpenVZ

I have a debian 7.8 server, running on OpenVZ. On this server I'm running a tor relay and some other network services (like apache and mysql). However the tor service seems to eat up all my available ...
1
vote
0answers
72 views

Should I disable the Nagle Algorithm for Outlook / Exchange RPC/HTTP communication?

I'm investigating reasons why several Outlook clients in non-cached mode are having delays communicating... resulting in Outlook hanging. My suspicion is that a Netscaler, or intermediate device (? ...
1
vote
0answers
80 views

Web sites freeze after clicking link - unexplainable ACK packet

We have a sporadic problem accessing some internal links on websites. (Windows Firefox, Internet Explorer, Chrome) Behaviour On first clicking a link, the browser will load infinitely. The second ...
1
vote
0answers
135 views

What happens if a machine gets a SYN/ACK packet without sending initial SYN packet?

I'm thinking of a situation where an attacker manipulates a SYN packet that was sent from A's source IP address to B. The server will receive the packet and think it's a legitimate packet, and send a ...
1
vote
0answers
22 views

How do I cap each individual tcp stream, to a fixed maximum rate?

I've read but not in depth all the various traffic shaping docs and seen the long question on HSFC scheduling Does anyone really understand how HFSC scheduling in Linux/BSD works? looked at the ...
1
vote
0answers
203 views

TCP High Send-q coupled with FIN_WAIT1 status

I'm having a problem with one of my webservers, which is taking minutes to completely render a web page. I had a look at the TCP connection and noticed that I have a very high value in the send-q ...
1
vote
0answers
558 views

tcp connection reset [RST, ACK]

getting this errors looks like server is restating the connection because of some packet loss any possible suggestion's to figure out this 37713 591.925575000 ...
1
vote
0answers
32 views

Split TCP packet - Data layer vs IPv4Layer

What is the different between split TCP packet in the Data layer compare to split the packet in IPv4Layer ?
1
vote
0answers
991 views

HAProxy resetting backend connections

I'm in the process of setting up a series of servers as proxies to our application server, primarily to obscure the application server's IP as part of a suite of anti-DDOS measures. My goal is to ...
1
vote
0answers
445 views

Always keep socat alive

I have a socat running nicely, executing my command when a connection comes in with the arguments provided. However, the issue I am having is that the socket is at EOF and the next time a connection ...
1
vote
0answers
2k views

Cannot make TCP Connection with OpenVPN Server

Client OpenVPN assigned IP: 10.8.0.2 ↓ TCP on 1194 Internet ↓ Router port-forwards 1194 to server- Public IP 104.162.67.198 ↓ Server LAN IP: 10.8.0.1 I think the above is what I am trying ...
1
vote
0answers
107 views

delay in ACK packets for ldap abandon request

we have migrated from an openldap server on linux to a DirX on windows 2008. The ldap server und normal serch request behaves as expected. However with some applications (weblogic deployed webapps) ...
1
vote
0answers
56 views

Why do some outgoing IP traffic not contain UID information?

I am doing egress logging on my server using IPTABLES with the following line which is supposed to provide UID information on all traffic that is logged: -A OUTPUT -j LOG --log-prefix "IPTABLES(O): " ...
1
vote
0answers
154 views

TCP Window Size Allocation, TCP Window Zero Errors and Network Latency

My mind is about to explode as everyone is always blaming the network guys for disconnections and slowness in the networks, but Solarwinds Reports that all utilization in the network devices and links ...
1
vote
0answers
63 views

periodic connection timeouts to nginx server

We have the following setup: One nginx server as a loadbalancer in front of four worker application servers. The nginx server get about 100 requests per second, sometimes more that that, active ...