Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.os.linux.networking > #677

Re: Unusual Packet Capture Between Linux and Windows

Show all headers | View raw

On 7.10.11 7:51 , Billy Mays wrote:
> Hey All,
>
>
> I am trying to solve a networking problem between my Windows Desktop and
> a 32 bit Ubuntu 10.04 Server. I believe that somewhere in the network
> stack traffic is being modified in a hard to detect manner.
>
> The problem I noticed came from when I tried to do a packet capture on
> both Linux (using tcpdump) and on Windows (using Wireshark). I attempted
> to download a file from an Apache server running on the linux box to the
> Windows box. Recording the traffic from linux seemed to show that the
> transit worked, however from the Windows side Wireshark reported a
> number of Dup Acks and many smaller packets with slightly different data
> in them.
>
>
> I have flushed all my iptables rules on the linux box so I am not sure
> what could cause the discrepancy. I can include the pcap files if needed.
>
> Any help is appreciated,
> Bill


Check that there are no duplicate IP or MAC addresses in the network,
they can cause those extra packets (if they are real). To be sure,
remove the cable to your connection to the Internet for the test
duration.

Check the captures from each end with Wireshark - it can read a
pcap file and decode it. To get at the TCP payload, click the
'Follow TCP stream' option for both and check results.

If there are still problems, please post the outputs of:

   iptables -nLv
   route -n
   ifconfig -a

from the Linux machine.

The IP details from Windows ipconfig/all (if there is such in the
new box anymore) will be of help.

-- 

Tauno Voipio

Back to comp.os.linux.networking | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Unusual Packet Capture Between Linux and Windows Billy Mays <noway@nohow.com> - 2011-10-07 12:51 -0400
  Re: Unusual Packet Capture Between Linux and Windows J G Miller <miller@yoyo.ORG> - 2011-10-07 17:08 +0000
    Re: Unusual Packet Capture Between Linux and Windows Billy Mays <noway@nohow.com> - 2011-10-07 13:23 -0400
  Re: Unusual Packet Capture Between Linux and Windows Rick Jones <rick.jones2@hp.com> - 2011-10-07 19:04 +0000
  Re: Unusual Packet Capture Between Linux and Windows Tauno Voipio <tauno.voipio@notused.fi.invalid> - 2011-10-07 22:39 +0300
    Re: Unusual Packet Capture Between Linux and Windows Billy Mays <noway@nohow.com> - 2011-10-11 12:31 -0400
  Re: Unusual Packet Capture Between Linux and Windows Andy Furniss <spam@andyfurniss.entadsl.com> - 2011-10-08 14:00 +0100
  Re: Unusual Packet Capture Between Linux and Windows Andy Furniss <spam@andyfurniss.entadsl.com> - 2011-10-10 09:39 +0100
    Re: Unusual Packet Capture Between Linux and Windows Billy Mays <noway@nohow.com> - 2011-10-11 11:40 -0400
      Re: Unusual Packet Capture Between Linux and Windows Andy Furniss <spam@andyfurniss.entadsl.com> - 2011-10-11 20:08 +0100
        Re: Unusual Packet Capture Between Linux and Windows Billy Mays <noway@nohow.com> - 2011-10-11 20:13 -0400
          Re: Unusual Packet Capture Between Linux and Windows Andy Furniss <spam@andyfurniss.entadsl.com> - 2011-10-13 10:52 +0100
            Re: Unusual Packet Capture Between Linux and Windows Billy Mays <noway@nohow.com> - 2011-10-19 10:29 -0400

csiph-web