Hi All,
i’m seeing traces that i don’t understand, can somebody help shed some
light on it ?
the background is that we’re using oracle clients to connect to a db server
in hong kong. the query will hang for about 10 minutes and a tcp rst will
be sent to both hosts.
– start –
trace from client:
91 1.486782 singapore hong-kong TNS 609 Request, Data (6), Data
92 1.487070 hong-kong singapore TCP 60 ncube-lm > fcmsys [ACK] Seq=13914 Ack=12916 Win=64980 Len=0
93 600.247192 hong-kong singapore TCP 1506 [TCP segment of a reassembled PDU]
94 600.247308 hong-kong singapore TCP 1506 [TCP segment of a reassembled PDU]
95 600.247326 singapore hong-kong TCP 54 fcmsys > ncube-lm [ACK] Seq=12916 Ack=16818 Win=65535 Len=0
96 600.247380 hong-kong singapore TCP 949 [TCP segment of a reassembled PDU]
97 600.247385 hong-kong singapore TCP 60 ncube-lm > fcmsys [RST] Seq=17713 Win=8192 Len=0
trace from server:
87 1.530584 singapore hong-kong TNS 609 Request, Data (6), Data
88 1.530983 hong-kong singapore TNS 8209 Response, Data (6), Data
89 1.531061 hong-kong singapore TNS 3921 Response, Data (6), Data
90 1.623874 singapore hong-kong TCP 60 15374 > ncube-lm [ACK] Seq=12916 Ack=15366 Win=64083 Len=0
91 1.624105 singapore hong-kong TCP 60 15374 > ncube-lm [ACK] Seq=12916 Ack=16818 Win=62631 Len=0
92 1.625160 singapore hong-kong TCP 60 15374 > ncube-lm [ACK] Seq=12916 Ack=18270 Win=61179 Len=0
93 1.626325 singapore hong-kong TCP 60 15374 > ncube-lm [ACK] Seq=12916 Ack=19722 Win=59727 Len=0
94 1.643312 singapore hong-kong TCP 60 15374 > ncube-lm [ACK] Seq=12916 Ack=21174 Win=58275 Len=0
95 1.643537 singapore hong-kong TCP 60 15374 > ncube-lm [ACK] Seq=12916 Ack=22069 Win=57380 Len=0
96 1.643965 singapore hong-kong TCP 60 15374 > ncube-lm [ACK] Seq=12916 Ack=23521 Win=55928 Len=0
97 1.644193 singapore hong-kong TCP 60 15374 > ncube-lm [ACK] Seq=12916 Ack=24973 Win=54476 Len=0
98 1.644417 singapore hong-kong TCP 60 15374 > ncube-lm [ACK] Seq=12916 Ack=25936 Win=53513 Len=0
99 600.186789 singapore hong-kong TCP 60 15374 > ncube-lm [RST] Seq=12916 Win=0 Len=0
– end –
how is it that the server receives frame #91 (seq: 12916, ack: 16818),
when the client reports sending the frame (#95, seq: 12916, ack: 16818)
later ?
in relative time offsets, the server reported receiving the frame at 1+ second,
while the client reported sending it at around 600+ seconds?
also, when connecting from outside the office (eg: from home to wan to server),
the same tools, query worked.
the gateways are juniper in singapore, and cisco linksys in hong kong…
thanks in advance for helping,
cheers,
sam