> Da: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED] Per conto di Wietse Venema

> Luigi Iotti:
> > 02:11:15.006582 IP (tos 0x0, ttl  64, id 43044, offset 0, 
> flags [DF], proto:
> > TCP (6), length: 52) 192.168.0.100.smtp > 
> squid-cache.org.54737: ., cksum
> > 0x1d47 (correct), 134:134(0) ack 2380 win 46 
> <nop,nop,timestamp 1599101060
> > 4005670333>
> >         0x0000:  4500 0034 a824 4000 4006 9fea c0a8 0064  
> [EMAIL PROTECTED]@......d
> >         0x0010:  0ca0 2509 0019 d5d1 b1de 244a 32f0 333b  
> ..%.......$J2.3;
> >         0x0020:  8010 002e 1d47 0000 0101 080a 5f50 5884  
> .....G......_PX.
> >         0x0030:  eec1 adbd                                ....
> 
> The receiver says (win 46) that it has room for 46 bytes of data.
> 
> > 02:12:17.735768 IP (tos 0x0, ttl  46, id 55626, offset 0, 
> flags [DF], proto:
> > TCP (6), length: 86) squid-cache.org.54737 > 192.168.0.100.smtp: .
> > 2380:2426(46) ack 134 win 65535
> >         0x0000:  4500 0056 d94a 4000 2e06 80a2 0ca0 2509  
> [EMAIL PROTECTED]
> >         0x0010:  c0a8 0064 d5d1 0019 32f0 333b b1de 244a  
> ...d....2.3;..$J
> >         0x0020:  5010 ffff 4328 0000 6e20 7468 6520 6375  
> P...C(..n.the.cu
> >         0x0030:  7272 656e 7420 332e 302e 5354 4142 4c45  
> rrent.3.0.STABLE
> >         0x0040:  3130 0d0a 7061 636b 6167 652e 0d0a 6874  
> 10..package...ht
> >         0x0050:  7470                                     tp
> 
> Two seconds later we have 46 bytes of data from the sender.

It's one minute and two seconds later. And window scaling is in effect (I go
deeper on this replying to Victor's answer). In short, it would seem I
receive at most one packet/minute from the remote server, and the window
scale is ignored. I'll double-check my network configs another time.

> Some traffic shaper/IDS/antivirus/whatever is mucking with TCP.
> If it happens on two of your machines, that's because you have
> configured both systems in a similar manner.
> 
>       Wietse 
> 

Reply via email to