Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: [Wireshark-users] Mails bigger than 192kB are timing out.

Date: Fri, 29 Jun 2007 04:33:46 -0500 (CDT)
Hi,

I have an issue between the connection of a client to a mail server. The
mail server works fine and it can process messages correctly. The client
works fine too and there is no problem to send emails using other mail
servers. However, when I try to send an email using this particular email
and the attachment is bigger than 192kB, the connection is timing out and
the email cannot be send. Here is a part of the wireshark log. I would
apreciate if someone has an idea what could cause this issue.


No.     Time        Source                Destination           Protocol Info
    181 261.956059  10.16.0.12            82.147.138.3          TLSv1   
Continuation Data, [Unreassembled Packet]

Frame 181 (1434 bytes on wire, 96 bytes captured)
Ethernet II, Src: Asiarock_ec:dc:96 (00:13:8f:ec:dc:96), Dst:
EdimaxTe_95:d4:a8 (00:0e:2e:95:d4:a8)
Internet Protocol, Src: 10.16.0.12 (10.16.0.12), Dst: 82.147.138.3
(82.147.138.3)
Transmission Control Protocol, Src Port: 53617 (53617), Dst Port: https
(443), Seq: 1704, Ack: 1391, Len: 1368
Secure Socket Layer
[Unreassembled Packet: SSL]

No.     Time        Source                Destination           Protocol Info
    182 262.030507  82.147.138.3          10.16.0.12            TCP     
https > 53617 [ACK] Seq=1391 Ack=3072 Win=64296 Len=0 TSV=952003085
TSER=275961

Frame 182 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: EdimaxTe_95:d4:a8 (00:0e:2e:95:d4:a8), Dst:
Asiarock_ec:dc:96 (00:13:8f:ec:dc:96)
Internet Protocol, Src: 82.147.138.3 (82.147.138.3), Dst: 10.16.0.12
(10.16.0.12)
Transmission Control Protocol, Src Port: https (443), Dst Port: 53617
(53617), Seq: 1391, Ack: 3072, Len: 0

No.     Time        Source                Destination           Protocol Info
    183 262.030567  10.16.0.12            82.147.138.3          TLSv1   
Continuation Data, [Unreassembled Packet]

Frame 183 (1434 bytes on wire, 96 bytes captured)
Ethernet II, Src: Asiarock_ec:dc:96 (00:13:8f:ec:dc:96), Dst:
EdimaxTe_95:d4:a8 (00:0e:2e:95:d4:a8)
Internet Protocol, Src: 10.16.0.12 (10.16.0.12), Dst: 82.147.138.3
(82.147.138.3)
Transmission Control Protocol, Src Port: 53617 (53617), Dst Port: https
(443), Seq: 3072, Ack: 1391, Len: 1368
Secure Socket Layer
[Unreassembled Packet: SSL]

No.     Time        Source                Destination           Protocol Info
    184 262.030579  10.16.0.12            82.147.138.3          TLSv1   
Continuation Data, [Unreassembled Packet]

Frame 184 (1434 bytes on wire, 96 bytes captured)
Ethernet II, Src: Asiarock_ec:dc:96 (00:13:8f:ec:dc:96), Dst:
EdimaxTe_95:d4:a8 (00:0e:2e:95:d4:a8)
Internet Protocol, Src: 10.16.0.12 (10.16.0.12), Dst: 82.147.138.3
(82.147.138.3)
Transmission Control Protocol, Src Port: 53617 (53617), Dst Port: https
(443), Seq: 4440, Ack: 1391, Len: 1368
Secure Socket Layer
[Unreassembled Packet: SSL]

No.     Time        Source                Destination           Protocol Info
    185 262.030588  10.16.0.12            82.147.138.3          TLSv1   
Continuation Data, [Unreassembled Packet]

Frame 185 (1434 bytes on wire, 96 bytes captured)
Ethernet II, Src: Asiarock_ec:dc:96 (00:13:8f:ec:dc:96), Dst:
EdimaxTe_95:d4:a8 (00:0e:2e:95:d4:a8)
Internet Protocol, Src: 10.16.0.12 (10.16.0.12), Dst: 82.147.138.3
(82.147.138.3)
Transmission Control Protocol, Src Port: 53617 (53617), Dst Port: https
(443), Seq: 5808, Ack: 1391, Len: 1368
Secure Socket Layer
[Unreassembled Packet: SSL]

No.     Time        Source                Destination           Protocol Info
    186 262.086233  82.147.138.3          10.16.0.12            TCP     
https > 53617 [ACK] Seq=1391 Ack=4440 Win=65664 Len=0 TSV=952003140
TSER=275980

Frame 186 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: EdimaxTe_95:d4:a8 (00:0e:2e:95:d4:a8), Dst:
Asiarock_ec:dc:96 (00:13:8f:ec:dc:96)
Internet Protocol, Src: 82.147.138.3 (82.147.138.3), Dst: 10.16.0.12
(10.16.0.12)
Transmission Control Protocol, Src Port: https (443), Dst Port: 53617
(53617), Seq: 1391, Ack: 4440, Len: 0

No.     Time        Source                Destination           Protocol Info
    187 262.086268  10.16.0.12            82.147.138.3          TLSv1   
Continuation Data, [Unreassembled Packet]

Frame 187 (1434 bytes on wire, 96 bytes captured)
Ethernet II, Src: Asiarock_ec:dc:96 (00:13:8f:ec:dc:96), Dst:
EdimaxTe_95:d4:a8 (00:0e:2e:95:d4:a8)
Internet Protocol, Src: 10.16.0.12 (10.16.0.12), Dst: 82.147.138.3
(82.147.138.3)
Transmission Control Protocol, Src Port: 53617 (53617), Dst Port: https
(443), Seq: 7176, Ack: 1391, Len: 1368
Secure Socket Layer
[Unreassembled Packet: SSL]

No.     Time        Source                Destination           Protocol Info
    188 262.086279  10.16.0.12            82.147.138.3          TLSv1   
Continuation Data, [Unreassembled Packet]

Frame 188 (1434 bytes on wire, 96 bytes captured)
Ethernet II, Src: Asiarock_ec:dc:96 (00:13:8f:ec:dc:96), Dst:
EdimaxTe_95:d4:a8 (00:0e:2e:95:d4:a8)
Internet Protocol, Src: 10.16.0.12 (10.16.0.12), Dst: 82.147.138.3
(82.147.138.3)
Transmission Control Protocol, Src Port: 53617 (53617), Dst Port: https
(443), Seq: 8544, Ack: 1391, Len: 1368
Secure Socket Layer
[Unreassembled Packet: SSL]

No.     Time        Source                Destination           Protocol Info
    189 262.127098  82.147.138.3          10.16.0.12            TCP     
https > 53617 [ACK] Seq=1391 Ack=7176 Win=64296 Len=0 TSV=952003180
TSER=275980

Frame 189 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: EdimaxTe_95:d4:a8 (00:0e:2e:95:d4:a8), Dst:
Asiarock_ec:dc:96 (00:13:8f:ec:dc:96)
Internet Protocol, Src: 82.147.138.3 (82.147.138.3), Dst: 10.16.0.12
(10.16.0.12)
Transmission Control Protocol, Src Port: https (443), Dst Port: 53617
(53617), Seq: 1391, Ack: 7176, Len: 0

No.     Time        Source                Destination           Protocol Info
    190 262.127136  10.16.0.12            82.147.138.3          TLSv1   
Continuation Data, [Unreassembled Packet]

Frame 190 (1434 bytes on wire, 96 bytes captured)
Ethernet II, Src: Asiarock_ec:dc:96 (00:13:8f:ec:dc:96), Dst:
EdimaxTe_95:d4:a8 (00:0e:2e:95:d4:a8)
Internet Protocol, Src: 10.16.0.12 (10.16.0.12), Dst: 82.147.138.3
(82.147.138.3)
Transmission Control Protocol, Src Port: 53617 (53617), Dst Port: https
(443), Seq: 9912, Ack: 1391, Len: 1368
Secure Socket Layer
[Unreassembled Packet: SSL]

No.     Time        Source                Destination           Protocol Info
    191 262.127147  10.16.0.12            82.147.138.3          TLSv1   
Continuation Data, [Unreassembled Packet]

Frame 191 (1434 bytes on wire, 96 bytes captured)
Ethernet II, Src: Asiarock_ec:dc:96 (00:13:8f:ec:dc:96), Dst:
EdimaxTe_95:d4:a8 (00:0e:2e:95:d4:a8)
Internet Protocol, Src: 10.16.0.12 (10.16.0.12), Dst: 82.147.138.3
(82.147.138.3)
Transmission Control Protocol, Src Port: 53617 (53617), Dst Port: https
(443), Seq: 11280, Ack: 1391, Len: 1368
Secure Socket Layer
[Unreassembled Packet: SSL]

No.     Time        Source                Destination           Protocol Info
    192 262.127222  10.16.0.12            82.147.138.3          TLSv1   
Continuation Data, [Unreassembled Packet]

Frame 192 (1434 bytes on wire, 96 bytes captured)
Ethernet II, Src: Asiarock_ec:dc:96 (00:13:8f:ec:dc:96), Dst:
EdimaxTe_95:d4:a8 (00:0e:2e:95:d4:a8)
Internet Protocol, Src: 10.16.0.12 (10.16.0.12), Dst: 82.147.138.3
(82.147.138.3)
Transmission Control Protocol, Src Port: 53617 (53617), Dst Port: https
(443), Seq: 12648, Ack: 1391, Len: 1368
Secure Socket Layer
[Unreassembled Packet: SSL]

No.     Time        Source                Destination           Protocol Info
    193 262.149684  82.147.138.3          10.16.0.12            TCP     
https > 53617 [ACK] Seq=1391 Ack=8544 Win=65664 Len=0 TSV=952003202
TSER=275994

Frame 193 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: EdimaxTe_95:d4:a8 (00:0e:2e:95:d4:a8), Dst:
Asiarock_ec:dc:96 (00:13:8f:ec:dc:96)
Internet Protocol, Src: 82.147.138.3 (82.147.138.3), Dst: 10.16.0.12
(10.16.0.12)
Transmission Control Protocol, Src Port: https (443), Dst Port: 53617
(53617), Seq: 1391, Ack: 8544, Len: 0

No.     Time        Source                Destination           Protocol Info
    194 262.149769  10.16.0.12            82.147.138.3          TLSv1   
Continuation Data, [Unreassembled Packet]

Frame 194 (1434 bytes on wire, 96 bytes captured)
Ethernet II, Src: Asiarock_ec:dc:96 (00:13:8f:ec:dc:96), Dst:
EdimaxTe_95:d4:a8 (00:0e:2e:95:d4:a8)
Internet Protocol, Src: 10.16.0.12 (10.16.0.12), Dst: 82.147.138.3
(82.147.138.3)
Transmission Control Protocol, Src Port: 53617 (53617), Dst Port: https
(443), Seq: 14016, Ack: 1391, Len: 1368
Secure Socket Layer
[Unreassembled Packet: SSL]

No.     Time        Source                Destination           Protocol Info
    195 262.149782  10.16.0.12            82.147.138.3          TLSv1   
Continuation Data, [Unreassembled Packet]

Frame 195 (1434 bytes on wire, 96 bytes captured)
Ethernet II, Src: Asiarock_ec:dc:96 (00:13:8f:ec:dc:96), Dst:
EdimaxTe_95:d4:a8 (00:0e:2e:95:d4:a8)
Internet Protocol, Src: 10.16.0.12 (10.16.0.12), Dst: 82.147.138.3
(82.147.138.3)
Transmission Control Protocol, Src Port: 53617 (53617), Dst Port: https
(443), Seq: 15384, Ack: 1391, Len: 1368
Secure Socket Layer
[Unreassembled Packet: SSL]

No.     Time        Source                Destination           Protocol Info
    196 262.190191  82.147.138.3          10.16.0.12            TCP     
https > 53617 [ACK] Seq=1391 Ack=11280 Win=64296 Len=0 TSV=952003243
TSER=275994

Frame 196 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: EdimaxTe_95:d4:a8 (00:0e:2e:95:d4:a8), Dst:
Asiarock_ec:dc:96 (00:13:8f:ec:dc:96)
Internet Protocol, Src: 82.147.138.3 (82.147.138.3), Dst: 10.16.0.12
(10.16.0.12)
Transmission Control Protocol, Src Port: https (443), Dst Port: 53617
(53617), Seq: 1391, Ack: 11280, Len: 0

No.     Time        Source                Destination           Protocol Info
    197 262.190274  10.16.0.12            82.147.138.3          TLSv1   
Continuation Data, [Unreassembled Packet]

Frame 197 (199 bytes on wire, 96 bytes captured)
Ethernet II, Src: Asiarock_ec:dc:96 (00:13:8f:ec:dc:96), Dst:
EdimaxTe_95:d4:a8 (00:0e:2e:95:d4:a8)
Internet Protocol, Src: 10.16.0.12 (10.16.0.12), Dst: 82.147.138.3
(82.147.138.3)
Transmission Control Protocol, Src Port: 53617 (53617), Dst Port: https
(443), Seq: 16752, Ack: 1391, Len: 133
Secure Socket Layer
[Unreassembled Packet: SSL]

No.     Time        Source                Destination           Protocol Info
    198 262.210158  82.147.138.3          10.16.0.12            TCP     
https > 53617 [ACK] Seq=1391 Ack=12648 Win=65664 Len=0 TSV=952003263
TSER=276004

Frame 198 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: EdimaxTe_95:d4:a8 (00:0e:2e:95:d4:a8), Dst:
Asiarock_ec:dc:96 (00:13:8f:ec:dc:96)
Internet Protocol, Src: 82.147.138.3 (82.147.138.3), Dst: 10.16.0.12
(10.16.0.12)
Transmission Control Protocol, Src Port: https (443), Dst Port: 53617
(53617), Seq: 1391, Ack: 12648, Len: 0

No.     Time        Source                Destination           Protocol Info
    199 262.255713  82.147.138.3          10.16.0.12            TCP     
https > 53617 [ACK] Seq=1391 Ack=15384 Win=64296 Len=0 TSV=952003309
TSER=276004

Frame 199 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: EdimaxTe_95:d4:a8 (00:0e:2e:95:d4:a8), Dst:
Asiarock_ec:dc:96 (00:13:8f:ec:dc:96)
Internet Protocol, Src: 82.147.138.3 (82.147.138.3), Dst: 10.16.0.12
(10.16.0.12)
Transmission Control Protocol, Src Port: https (443), Dst Port: 53617
(53617), Seq: 1391, Ack: 15384, Len: 0

No.     Time        Source                Destination           Protocol Info
    200 262.276357  82.147.138.3          10.16.0.12            TCP     
https > 53617 [ACK] Seq=1391 Ack=16885 Win=64162 Len=0 TSV=952003329
TSER=276010

Frame 200 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: EdimaxTe_95:d4:a8 (00:0e:2e:95:d4:a8), Dst:
Asiarock_ec:dc:96 (00:13:8f:ec:dc:96)
Internet Protocol, Src: 82.147.138.3 (82.147.138.3), Dst: 10.16.0.12
(10.16.0.12)
Transmission Control Protocol, Src Port: https (443), Dst Port: 53617
(53617), Seq: 1391, Ack: 16885, Len: 0

No.     Time        Source                Destination           Protocol Info
    201 564.417123  82.147.138.3          10.16.0.12            SSL     
[Packet size limited during capture]

Frame 201 (103 bytes on wire, 96 bytes captured)
Ethernet II, Src: EdimaxTe_95:d4:a8 (00:0e:2e:95:d4:a8), Dst:
Asiarock_ec:dc:96 (00:13:8f:ec:dc:96)
Internet Protocol, Src: 82.147.138.3 (82.147.138.3), Dst: 10.16.0.12
(10.16.0.12)
Transmission Control Protocol, Src Port: https (443), Dst Port: 53617
(53617), Seq: 1391, Ack: 16885, Len: 37
Secure Socket Layer
[Packet size limited during capture: SSL truncated]

No.     Time        Source                Destination           Protocol Info
    202 564.417203  10.16.0.12            82.147.138.3          TCP     
53617 > https [ACK] Seq=16885 Ack=1428 Win=8736 Len=0 TSV=351577
TSER=952305410

Frame 202 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Asiarock_ec:dc:96 (00:13:8f:ec:dc:96), Dst:
EdimaxTe_95:d4:a8 (00:0e:2e:95:d4:a8)
Internet Protocol, Src: 10.16.0.12 (10.16.0.12), Dst: 82.147.138.3
(82.147.138.3)
Transmission Control Protocol, Src Port: 53617 (53617), Dst Port: https
(443), Seq: 16885, Ack: 1428, Len: 0

No.     Time        Source                Destination           Protocol Info
    203 564.417503  82.147.138.3          10.16.0.12            TCP     
https > 53617 [FIN, ACK] Seq=1428 Ack=16885 Win=65664 Len=0
TSV=952305410 TSER=276010

Frame 203 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: EdimaxTe_95:d4:a8 (00:0e:2e:95:d4:a8), Dst:
Asiarock_ec:dc:96 (00:13:8f:ec:dc:96)
Internet Protocol, Src: 82.147.138.3 (82.147.138.3), Dst: 10.16.0.12
(10.16.0.12)
Transmission Control Protocol, Src Port: https (443), Dst Port: 53617
(53617), Seq: 1428, Ack: 16885, Len: 0

No.     Time        Source                Destination           Protocol Info
    204 564.456354  10.16.0.12            82.147.138.3          TCP     
53617 > https [ACK] Seq=16885 Ack=1429 Win=8736 Len=0 TSV=351587
TSER=952305410

Frame 204 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Asiarock_ec:dc:96 (00:13:8f:ec:dc:96), Dst:
EdimaxTe_95:d4:a8 (00:0e:2e:95:d4:a8)
Internet Protocol, Src: 10.16.0.12 (10.16.0.12), Dst: 82.147.138.3
(82.147.138.3)
Transmission Control Protocol, Src Port: 53617 (53617), Dst Port: https
(443), Seq: 16885, Ack: 1429, Len: 0

No.     Time        Source                Destination           Protocol Info
    205 567.424240  10.16.0.12            82.147.138.3          TCP     
53617 > https [FIN, ACK] Seq=16885 Ack=1429 Win=8736 Len=0 TSV=352329
TSER=952305410

Frame 205 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Asiarock_ec:dc:96 (00:13:8f:ec:dc:96), Dst:
EdimaxTe_95:d4:a8 (00:0e:2e:95:d4:a8)
Internet Protocol, Src: 10.16.0.12 (10.16.0.12), Dst: 82.147.138.3
(82.147.138.3)
Transmission Control Protocol, Src Port: 53617 (53617), Dst Port: https
(443), Seq: 16885, Ack: 1429, Len: 0

No.     Time        Source                Destination           Protocol Info
    206 567.457015  82.147.138.3          10.16.0.12            TCP     
https > 53617 [ACK] Seq=1429 Ack=16886 Win=65662 Len=0 TSV=952308449
TSER=352329

Frame 206 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: EdimaxTe_95:d4:a8 (00:0e:2e:95:d4:a8), Dst:
Asiarock_ec:dc:96 (00:13:8f:ec:dc:96)
Internet Protocol, Src: 82.147.138.3 (82.147.138.3), Dst: 10.16.0.12
(10.16.0.12)
Transmission Control Protocol, Src Port: https (443), Dst Port: 53617
(53617), Seq: 1429, Ack: 16886, Len: 0