On Tue, Nov 21, 2006 at 01:34:27PM -0500, Jay Gellman wrote:
> I am tracking a slow email transfer problem with one of my servers and
> have found the following:
>
> I can see the handshake and transfer of commands to the mail server; I
> see data flowing then after about 20 packets I see a TCP DUP Ack
>
> Then the rest of the packets reply with a [TCP Window Full] Message
> Body
>
> Does anyone know what would cause this?
Is there a larger delay between packets once the window full messages
start happening? The easiest way to see this in Wireshark is to select
View -> Time Display Format -> Seconds Since Previous Packet.
Steve
