1

I'm troubleshooting a strange network issue in our production environment.

The dumped pcap file comes from the full NAT mode LVS , and the toploy of the ip address in the dump file is:

172.19.132.90(client)-> 172.52.0.3, 172.16.246.46 -> 172.16.211.57(server)

The dumped file's snapshot: https://i.stack.imgur.com/vwiWY.jpg

I noticed the SRE value in the D-SACK is unbelievable BIG! Also the ack package isn't received by our client.(I also dump a file on 172.19.132.90 and cannot see the ACK)

My questions are Why the SRE is so big? Is that the reason the ACK failed to be received by the client?

0

You must log in to answer this question.

Browse other questions tagged .