Ack too long and window frozens 1

[okretzer]

Im doing a sniff between a pc and a server, during this sniff (about 1 hours worth) i see 750 of "ack too long" and 100 window frozens. Are these problems or problems that are ok? i heard as long as i dont see any "retransmission" with the ack too long then its ok, is that true or are these 2 really a problem?

Reason i did the sniff was becuase the px has a batch process running on it that seems to hang on3 a week and with the sniffer trying to figure out why it is hanging.

Thanks for the info and help

 

[vipergg]

Frozen windows is not inherrently a problem it is actually a throttle mechanism when things get busy . Ack too long could be a problem depending on what the problem is you are troubleshooting . You have to remmeber these values are general values the sniffer sets as to what a ack too long is supposed to be and believe these thresholds are modifyable if need be . Most people leave them as default and troublshoot from there .

 

[fortunat]

I've attempted to document this in my Fluke section, but still applicable. Go to:

http://www.thetechfirm.com/fluke_networks/tcp_window_frozen.ppt

Let me know if this helps..

'Making things work better; bit by bit.'