Luigi Iotti:
> 02:11:15.006582 IP (tos 0x0, ttl  64, id 43044, offset 0, flags [DF], proto:
> TCP (6), length: 52) 192.168.0.100.smtp > squid-cache.org.54737: ., cksum
> 0x1d47 (correct), 134:134(0) ack 2380 win 46 <nop,nop,timestamp 1599101060
> 4005670333>
>         0x0000:  4500 0034 a824 4000 4006 9fea c0a8 0064  [EMAIL 
> PROTECTED]@......d
>         0x0010:  0ca0 2509 0019 d5d1 b1de 244a 32f0 333b  ..%.......$J2.3;
>         0x0020:  8010 002e 1d47 0000 0101 080a 5f50 5884  .....G......_PX.
>         0x0030:  eec1 adbd                                ....

The receiver says (win 46) that it has room for 46 bytes of data.

> 02:12:17.735768 IP (tos 0x0, ttl  46, id 55626, offset 0, flags [DF], proto:
> TCP (6), length: 86) squid-cache.org.54737 > 192.168.0.100.smtp: .
> 2380:2426(46) ack 134 win 65535
>         0x0000:  4500 0056 d94a 4000 2e06 80a2 0ca0 2509  [EMAIL PROTECTED]
>         0x0010:  c0a8 0064 d5d1 0019 32f0 333b b1de 244a  ...d....2.3;..$J
>         0x0020:  5010 ffff 4328 0000 6e20 7468 6520 6375  P...C(..n.the.cu
>         0x0030:  7272 656e 7420 332e 302e 5354 4142 4c45  rrent.3.0.STABLE
>         0x0040:  3130 0d0a 7061 636b 6167 652e 0d0a 6874  10..package...ht
>         0x0050:  7470                                     tp

Two seconds later we have 46 bytes of data from the sender.

Some traffic shaper/IDS/antivirus/whatever is mucking with TCP.
If it happens on two of your machines, that's because you have
configured both systems in a similar manner.

        Wietse 

Reply via email to