FTP login delay

[bpafc]

We are having a very strange issue with one of our clients, they have recently had a new EFM (leased line) installed and ever since utilising this conenction they are no longer able to use an FTP service on their accounting/logistics software. They now have a 20 seconds delay from requesting FTP to gaining a login prompt and this length of time means a login timeout. I have included a link to the filtered pcap and you can see the delay in response. Can somebody help here and suggest where this delay is coming from/how we can find out more information about where the delay is coming from? Do you have any suggestions at all. ISP are washing their hands and have stated its not happening on their network. The FTP hosts are also pulling the same line while the customer sits in the middle with no FTP connection

Help please

Any further info can be provided (tracerts etc)

This is not a DNS issue as we have tested direct to the public IP with the same results.

 

[SamBones]

The handshake looks nice and fast. So there's no DNS or route issues. It doesn't slow down until the exchange switches to the FTP protocol.

1) Do other people experience slowness when connecting to this same FTP server? From that same location? From other locations?

2) Does this client experience slowness when connecting to other FTP servers?

I don't think there's a firewall filtering FTP since it does eventually go through. It's just slow in responding.

What OS is the FTP server running on? On that server, watch to see how quickly the ftp server (ftpd) comes up. If it's Windows, look for firewall or AV software that might be inspecting the traffic.

Same on the client side. what OS, and look for AV or firewall.

 

[bpafc]

Thanks for your help SamBones.

The FTP server is GXS freeway they are huge and have come back to me to say that nobody else is experiencing issues of this nature only us and are not looking to help at all. Their response is below.

'The connection being used on our side is the same on that was being used by the customer before they moved over to their new provider. The connection they are using is the same as the other 500+ client/partners communicating with our data centre and they are the only ones having an issue, beyond our own community the external link is actually a GXS connection so is also being used by other parts of the GXS community.

Unfortunately this means we cannot offer any further advise as we are unable to advise on network related issues outside of our own data centres.'

In response to question 1, no other reports of issues as the response above covers.

2) We have not been able to replicate the issue on altenrative FTP servers as of yet from this connection.

The customer does have access to an altenrative connection on site and we are load balancing this for FTP traffic but I would just love to know why a managed service leased line connection is unable to complete this negotiation any quicker?? Thanks again

Barry