large download hang

[Ton]

We have a simular problem. We are using Wingate 6.0.4. We are using just NAT. When downloading large files the connection is lost.

We made a test configuration. This configuration exists of 1 server with Wingate and 1 client. The ADSL internetline is directly connected to the Wingate machine. From the client we downloaded a large file and we downloaded headers from a newsgroup. From both downloads we captured the packets.

The Wingate machine has IP adress 192.168.0.1 and the client has IP adress 192.168.0.2. All other adresses you see in the captured packets are from the internet. When the connection is lost we see everytime duplicate ACK's. These messages come from the client.



Here are the captured packets from a download (SP1 for W2003 from Microsoft):

No. Time Source Destination Protocol Info
45945 408.599130 212.73.245.94 192.168.0.2 HTTP Continuation or non-HTTP traffic
45946 408.605325 212.73.245.94 192.168.0.2 HTTP Continuation or non-HTTP traffic
45947 408.606837 192.168.0.2 212.73.245.94 TCP 1772 > http [ACK] Seq=0 Ack=44228656 Win=17424 Len=0
45948 408.611159 212.73.245.94 192.168.0.2 HTTP Continuation or non-HTTP traffic
45949 408.620089 212.73.245.94 192.168.0.2 HTTP Continuation or non-HTTP traffic
45950 408.621604 192.168.0.2 212.73.245.94 TCP 1772 > http [ACK] Seq=0 Ack=44231560 Win=17424 Len=0
45951 408.626127 212.73.245.94 192.168.0.2 HTTP Continuation or non-HTTP traffic
45952 408.632100 212.73.245.94 192.168.0.2 HTTP Continuation or non-HTTP traffic
45953 408.633624 192.168.0.2 212.73.245.94 TCP 1772 > http [ACK] Seq=0 Ack=44234464 Win=17424 Len=0
45954 408.638149 212.73.245.94 192.168.0.2 HTTP Continuation or non-HTTP traffic
45955 408.644172 212.73.245.94 192.168.0.2 HTTP Continuation or non-HTTP traffic
45956 408.645697 192.168.0.2 212.73.245.94 TCP 1772 > http [ACK] Seq=0 Ack=44237368 Win=17424 Len=0
45957 408.653087 212.73.245.94 192.168.0.2 HTTP Continuation or non-HTTP traffic
45958 408.659048 212.73.245.94 192.168.0.2 HTTP Continuation or non-HTTP traffic
45959 408.660568 192.168.0.2 212.73.245.94 TCP 1772 > http [ACK] Seq=0 Ack=44240272 Win=17424 Len=0
45960 408.665087 212.73.245.94 192.168.0.2 HTTP Continuation or non-HTTP traffic
45961 408.677093 212.73.245.94 192.168.0.2 HTTP Continuation or non-HTTP traffic
45962 408.678629 192.168.0.2 212.73.245.94 TCP 1772 > http [ACK] Seq=0 Ack=44241724 Win=17424 Len=0 SLE=44243176 SRE=44244628
45963 408.686093 212.73.245.94 192.168.0.2 HTTP Continuation or non-HTTP traffic
45964 408.687556 192.168.0.2 212.73.245.94 TCP [TCP Dup ACK 45962#1] 1772 > http [ACK] Seq=0 Ack=44241724 Win=17424 Len=0 SLE=44243176 SRE=44246080
45965 408.692145 212.73.245.94 192.168.0.2 HTTP Continuation or non-HTTP traffic
45966 408.693611 192.168.0.2 212.73.245.94 TCP [TCP Dup ACK 45962#2] 1772 > http [ACK] Seq=0 Ack=44241724 Win=17424 Len=0 SLE=44243176 SRE=44247532
45967 408.698114 212.73.245.94 192.168.0.2 HTTP Continuation or non-HTTP traffic
45968 408.699681 192.168.0.2 212.73.245.94 TCP [TCP Dup ACK 45962#3] 1772 > http [ACK] Seq=0 Ack=44241724 Win=17424 Len=0 SLE=44243176 SRE=44248984
45969 408.704089 212.73.245.94 192.168.0.2 HTTP Continuation or non-HTTP traffic
45970 408.705638 192.168.0.2 212.73.245.94 TCP [TCP Dup ACK 45962#4] 1772 > http [ACK] Seq=0 Ack=44241724 Win=17424 Len=0 SLE=44243176 SRE=44250436
45971 408.710162 212.73.245.94 192.168.0.2 HTTP Continuation or non-HTTP traffic
45972 408.711646 192.168.0.2 212.73.245.94 TCP [TCP Dup ACK 45962#5] 1772 > http [ACK] Seq=0 Ack=44241724 Win=17424 Len=0 SLE=44243176 SRE=44251888
45973 408.719171 212.73.245.94 192.168.0.2 HTTP Continuation or non-HTTP traffic
45974 408.720648 192.168.0.2 212.73.245.94 TCP [TCP Dup ACK 45962#6] 1772 > http [ACK] Seq=0 Ack=44241724 Win=17424 Len=0 SLE=44243176 SRE=44253340
45975 408.725134 212.73.245.94 192.168.0.2 HTTP Continuation or non-HTTP traffic
45976 408.726586 192.168.0.2 212.73.245.94 TCP [TCP Dup ACK 45962#7] 1772 > http [ACK] Seq=0 Ack=44241724 Win=17424 Len=0 SLE=44243176 SRE=44254792
45977 408.731052 212.73.245.94 192.168.0.2 HTTP Continuation or non-HTTP traffic
45978 408.732518 192.168.0.2 212.73.245.94 TCP [TCP Dup ACK 45962#8] 1772 > http [ACK] Seq=0 Ack=44241724 Win=17424 Len=0 SLE=44243176 SRE=44256244
45979 408.737291 212.73.245.94 192.168.0.2 HTTP Continuation or non-HTTP traffic
45980 408.737603 212.73.245.94 192.168.0.2 TCP http > 1772 [RST] Seq=44241724 Ack=2664234699 Win=0 Len=0
45981 408.737624 212.73.245.94 192.168.0.2 TCP http > 1772 [RST] Seq=44241724 Ack=2664234699 Win=0 Len=0
45982 408.737670 212.73.245.94 192.168.0.2 TCP http > 1772 [RST] Seq=44241724 Ack=2664234699 Win=0 Len=0
45983 408.737702 212.73.245.94 192.168.0.2 TCP http > 1772 [RST] Seq=44241724 Ack=2664234699 Win=0 Len=0
45984 408.738890 192.168.0.2 212.73.245.94 TCP [TCP Dup ACK 45962#9] 1772 > http [ACK] Seq=0 Ack=44241724 Win=17424 Len=0 SLE=44243176 SRE=44257696
45985 408.739006 212.73.245.94 192.168.0.2 TCP http > 1772 [RST] Seq=44241724 Ack=2664234699 Win=0 Len=0
45986 408.741732 212.73.245.94 192.168.0.2 TCP http > 1772 [RST] Seq=44241724 Ack=2664234699 Win=0 Len=0
45987 408.750726 212.73.245.94 192.168.0.2 TCP http > 1772 [RST] Seq=44241724 Ack=2664234699 Win=0 Len=0
45988 408.756699 212.73.245.94 192.168.0.2 TCP http > 1772 [RST] Seq=44241724 Ack=2664234699 Win=0 Len=0
45989 408.762777 212.73.245.94 192.168.0.2 TCP http > 1772 [RST] Seq=44241724 Ack=2664234699 Win=0 Len=0
45990 408.768760 212.73.245.94 192.168.0.2 TCP http > 1772 [RST] Seq=44241724 Ack=2664234699 Win=0 Len=0

Next you see a download from headers from a newsgroup:

13400 77.739674 194.109.133.133 192.168.0.2 NNTP Response: l.nl alt.binaries.boneless:160327864
13401 77.745745 194.109.133.133 192.168.0.2 NNTP Response: D 1/3 #389451 [053/178] - "cdr-nesb2d1-dvd.part050.rar" yEnc (21/79)\tno.way@jose.va (Cd-Ron)\t21 May 2005 23:19:43 GMT\t<part21of79.myjM48StFm1AwD5nwKoi@Cdron>\t\t396900\t3048\tXref: article.news.xs4all.nl alt.binaries.boneless:160327870
13402 77.747302 192.168.0.2 194.109.133.133 TCP 1699 > nntp [ACK] Seq=56 Ack=11704849 Win=17472 Len=0
13403 77.751683 194.109.133.133 192.168.0.2 NNTP Response: 19:54 GMT\t<part27of79.iYsfX1CnztxgpggqQP0d@Cdron>\t\t397096\t3050\tXref: article.news.xs4all.nl alt.binaries.boneless:160327875
13404 77.760643 194.109.133.133 192.168.0.2 NNTP Response: t.binaries.boneless:160327880
13405 77.762198 192.168.0.2 194.109.133.133 TCP 1699 > nntp [ACK] Seq=56 Ack=11707753 Win=17472 Len=0
13406 77.766740 194.109.133.133 192.168.0.2 NNTP Response: 7885
13407 77.772721 194.109.133.133 192.168.0.2 NNTP Response: d.eweka.nl>\t\t595128\t4574\tXref: article.news.xs4all.nl alt.binaries.boneless:160327891
13408 77.774280 192.168.0.2 194.109.133.133 TCP 1699 > nntp [ACK] Seq=56 Ack=11710657 Win=17472 Len=0
13409 77.778762 194.109.133.133 192.168.0.2 NNTP Response: icle.news.xs4all.nl alt.binaries.boneless:160327896
13410 77.784727 194.109.133.133 192.168.0.2 NNTP Response: azy-Boy-extra-pars.vol0038+27.PAR2 luchtwolf-ripped-by-Crazy-Boy EXTRA PAR 2 " yEnc (188/210)\tcrazyboy@dc-lan.nl (Crazy-Boy)\t21 May 2005 23:19:26 GMT\t<part188of210.yL&P0sFjcl3HZRkpJ3ch@powerpost2000AA.local>\t\t258536\t1984\tXref: article.news.xs4all.nl alt.binaries.boneless:160327902
13411 77.786286 192.168.0.2 194.109.133.133 TCP 1699 > nntp [ACK] Seq=56 Ack=11713561 Win=17472 Len=0
13412 77.793777 194.109.133.133 192.168.0.2 NNTP Response:
13413 77.799685 194.109.133.133 192.168.0.2 NNTP Response: " (025/131)\tmryaseen@msn.com (Aarya)\tSat, 21 May 2005 18:10:52 -0500\t<part25of131.xKoXyKVymKy8dFfMhQtv@powerpost2000AA.local>\t\t397764\t3051\tXref: article.news.xs4all.nl alt.binaries.boneless:160327912
13414 77.801254 192.168.0.2 194.109.133.133 TCP 1699 > nntp [ACK] Seq=56 Ack=11716465 Win=17472 Len=0
13415 77.805778 194.109.133.133 192.168.0.2 NNTP Response: JCt5@powerpost2000AA.local>\t\t258669\t1985\tXref: article.news.xs4all.nl alt.binaries.boneless:160327917
13416 77.811755 194.109.133.133 192.168.0.2 NNTP Response: 923\tRepost FTD 390629 [036/104] - "Erwtje.part034.rar" yEnc (01/63)\tYenc@power-post.org (Bet @Yenc-PP-A&A)\tSat, 21 May 2005 23:10:33 -0000\t<118vfv9f6kjjnce@corp.supernews.com>\t\t661376\t5083\tXref: article.news.xs4all.nl alt.binaries.boneless:160327923
13417 77.813322 192.168.0.2 194.109.133.133 TCP 1699 > nntp [ACK] Seq=56 Ack=11719369 Win=17472 Len=0
13418 77.817709 194.109.133.133 192.168.0.2 NNTP Response: 21 -0000\t<118vfutav7l41c0@corp.supernews.com>\t\t661327\t5082\tXref: article.news.xs4all.nl alt.binaries.boneless:160327928
13419 77.826760 194.109.133.133 192.168.0.2 NNTP Response: ewsreader2.eweka.nl>\t\t258504\t1985\tXref: article.news.xs4all.nl alt.binaries.boneless:160327933
13420 77.828324 192.168.0.2 194.109.133.133 TCP 1699 > nntp [ACK] Seq=56 Ack=11722273 Win=17472 Len=0
13421 77.832767 194.109.133.133 192.168.0.2 NNTP Response: ef: article.news.xs4all.nl alt.binaries.boneless:160327938
13422 77.838753 194.109.133.133 192.168.0.2 NNTP Response: ss:160327943
13423 77.840317 192.168.0.2 194.109.133.133 TCP 1699 > nntp [ACK] Seq=56 Ack=11725177 Win=17472 Len=0
13424 77.844832 194.109.133.133 192.168.0.2 NNTP Response: rs) [13/96] - "brekers.part12.rar" yEnc (055/201)\tYenc@power-post.org (ricardo001)\tSat, 21 May 2005 23:13:01 GMT\t<part55of201.vf2bUx4iMTBvXW3sZe8f@powerpost2000AA.local>\t\t258802\t1985\tXref: article.news.xs4all.nl alt.binaries.boneless:160327949
13425 77.858216 194.109.133.133 192.168.0.2 NNTP Response: 4 +0200\t<part127of211.0&&xJEShq4QMHk80b6LC@powerpost2000AA.local>\t\t258441\t1984\tXref: article.news.xs4all.nl alt.binaries.boneless:160327954
13426 77.859854 192.168.0.2 194.109.133.133 TCP 1699 > nntp [ACK] Seq=56 Ack=11728081 Win=17472 Len=0
13427 77.859953 194.109.133.133 192.168.0.2 NNTP Response: article.news.xs4all.nl alt.binaries.boneless:160327959
13428 77.865991 194.109.133.133 192.168.0.2 NNTP Response: gate - Season 1 Disc 6 [027/524] -- SG1_BOX_S1_D6_NL.part026.rar (yEnc) (07/61)\twalsemgeest@planet.nl (WhiTeBoY)\t21 May 2005 23:07:42 GMT\t<part7of61.jXf5qHhras5doeBp9$Us@powerpost2000AA.local>\t\t259112\t1987\tXref: article.news.xs4all.nl alt.binaries.boneless:160327965 alt.binaries.stargate-sg1:12204061
13429 77.867571 192.168.0.2 194.109.133.133 TCP 1699 > nntp [ACK] Seq=56 Ack=11730985 Win=17472 Len=0
13430 77.878017 194.109.133.133 192.168.0.2 NNTP [TCP Previous segment lost] Response: <part54of201.5WYDHiE2NB4SSdSWFjTm@powerpost2000AA.local>\t\t258650\t1984\tXref: article.news.xs4all.nl alt.binaries.boneless:160327975
13431 77.879675 192.168.0.2 194.109.133.133 TCP [TCP Dup ACK 13429#1] 1699 > nntp [ACK] Seq=56 Ack=11730985 Win=17472 Len=0
13432 77.887027 194.109.133.133 192.168.0.2 NNTP Response: neless:160327980
13433 77.888630 192.168.0.2 194.109.133.133 TCP [TCP Dup ACK 13429#2] 1699 > nntp [ACK] Seq=56 Ack=11730985 Win=17472 Len=0
13434 77.892768 194.109.133.133 192.168.0.2 NNTP Response: 21 May 2005 23:11:57 GMT\t<428fc032$0$25574$ba620dc5@nova.planet.nl>\t\t330877\t2543\tXref: article.news.xs4all.nl alt.binaries.boneless:160327986
13435 77.894243 192.168.0.2 194.109.133.133 TCP [TCP Dup ACK 13429#3] 1699 > nntp [ACK] Seq=56 Ack=11730985 Win=17472 Len=0
13436 77.898754 194.109.133.133 192.168.0.2 NNTP Response: news.xs4all.nl alt.binaries.boneless:160327991
13437 77.900212 192.168.0.2 194.109.133.133 TCP [TCP Dup ACK 13429#4] 1699 > nntp [ACK] Seq=56 Ack=11730985 Win=17472 Len=0
13438 77.904694 194.109.133.133 192.168.0.2 NNTP Response: \t<428fc047$0$1601$ba620dc5@nova.planet.nl>\t\t330946\t2543\tXref: article.news.xs4all.nl alt.binaries.boneless:160327997
13439 77.906166 192.168.0.2 194.109.133.133 TCP [TCP Dup ACK 13429#5] 1699 > nntp [ACK] Seq=56 Ack=11730985 Win=17472 Len=0
13440 77.910812 194.109.133.133 192.168.0.2 NNTP Response: \t1985\tXref: article.news.xs4all.nl alt.binaries.boneless:160328002
13441 77.912360 192.168.0.2 194.109.133.133 TCP [TCP Dup ACK 13429#6] 1699 > nntp [ACK] Seq=56 Ack=11730985 Win=17472 Len=0
13442 77.919778 194.109.133.133 192.168.0.2 NNTP Response: 23:12:33 GMT\t<428fc056$0$25574$ba620dc5@nova.planet.nl>\t\t331075\t2544\tXref: article.news.xs4all.nl alt.binaries.boneless:160328008
13443 77.921259 192.168.0.2 194.109.133.133 TCP [TCP Dup ACK 13429#7] 1699 > nntp [ACK] Seq=56 Ack=11730985 Win=17472 Len=0
13444 77.931717 194.109.133.133 192.168.0.2 NNTP Response: AMMER.part085.rarbert visser jammer" yEncsarretje39 (005/201)\tYenc@power-post.org (sarretje39)\t21 May 2005 23:12:52 GMT\t<428fc06b$0$1628$ba620dc5@nova.planet.nl>\t\t258215\t1984\tXref: article.news.xs4all.nl alt.binaries.boneless:160328014
13445 77.933194 192.168.0.2 194.109.133.133 TCP [TCP Dup ACK 13429#8] 1699 > nntp [ACK] Seq=56 Ack=11730985 Win=17472 Len=0
13446 77.940769 194.109.133.133 192.168.0.2 NNTP Response: ef: article.news.xs4all.nl alt.binaries.boneless:160328019
13447 77.942243 192.168.0.2 194.109.133.133 TCP [TCP Dup ACK 13429#9] 1699 > nntp [ACK] Seq=56 Ack=11730985 Win=17472 Len=0
13448 77.946932 194.109.133.133 192.168.0.2 NNTP Response: st [23/85] - "SINGSTAR3_POP.part22.rar" yEnc (057/157)\tteam@rocket.rescue (bertje)\t21 May 2005 23:13:06 GMT\t<428fc077$0$24879$ba620dc5@nova.planet.nl>\t\t330984\t2543\tXref: article.news.xs4all.nl alt.binaries.boneless:160328025
13449 77.948414 192.168.0.2 194.109.133.133 TCP [TCP Dup ACK 13429#10] 1699 > nntp [ACK] Seq=56 Ack=11730985 Win=17472 Len=0
13450 77.953120 194.109.133.133 192.168.0.2 NNTP Response: 005 23:13:08 GMT\t<428fc07b$0$1627$ba620dc5@nova.planet.nl>\t\t258312\t1984\tXref: article.news.xs4all.nl alt.binaries.boneless:160328030
13451 77.953182 194.109.133.133 192.168.0.2 TCP nntp > 1699 [RST] Seq=11730985 Ack=4245483673 Win=0 Len=0
13452 77.953202 194.109.133.133 192.168.0.2 TCP nntp > 1699 [RST] Seq=11730985 Ack=4245483673 Win=0 Len=0
13453 77.953221 194.109.133.133 192.168.0.2 TCP nntp > 1699 [RST] Seq=11730985 Ack=4245483673 Win=0 Len=0
13454 77.953240 194.109.133.133 192.168.0.2 TCP nntp > 1699 [RST] Seq=11730985 Ack=4245483673 Win=0 Len=0
13455 77.954692 192.168.0.2 194.109.133.133 TCP [TCP Dup ACK 13429#11] 1699 > nntp [ACK] Seq=56 Ack=11730985 Win=17472 Len=0
13456 77.954851 194.109.133.133 192.168.0.2 TCP nntp > 1699 [RST] Seq=11730985 Ack=4245483673 Win=0 Len=0
13457 77.954896 194.109.133.133 192.168.0.2 TCP nntp > 1699 [RST] Seq=11730985 Ack=4245483673 Win=0 Len=0
13458 77.957414 194.109.133.133 192.168.0.2 TCP nntp > 1699 [RST] Seq=11730985 Ack=4245483673 Win=0 Len=0
13459 77.958409 192.168.0.2 194.109.133.133 TCP 1701 > nntp [SYN] Seq=0 Ack=0 Win=16384 Len=0 MSS=1460
13460 77.962685 194.109.133.133 192.168.0.2 TCP nntp > 1699 [RST] Seq=11730985 Ack=4245483673 Win=0 Len=0
13461 77.962734 194.109.133.133 192.168.0.2 TCP nntp > 1699 [RST] Seq=11730985 Ack=4245483673 Win=0 Len=0
13462 77.963553 194.109.133.133 192.168.0.2 TCP nntp > 1699 [RST] Seq=11730985 Ack=4245483673 Win=0 Len=0
13463 77.972663 194.109.133.133 192.168.0.2 TCP nntp > 1699 [RST] Seq=11730985 Ack=4245483673 Win=0 Len=0
13464 77.975392 194.109.133.133 192.168.0.2 TCP nntp > 1701 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1456[/list]

[Pascal]

In WinGate Advanced Options (Start Menu) switch to the Protocol Handling page and try turning on "Allow recalculation of 0 TCP checksums". Not guaranteed, but might fix the problem.

[Ton]

"Allow recalculation of 0 TCP checksums" is already checked. It doesn't solve the problem.

[Genesis]

Have the same problem here, anyone found out a solution?

[n0ticer]

if tcp window is too small w/c may result to communication difficulties (as posted by pascal) ...see if this link/tools can help:

Adjust TCP Window Size

Screenshot

on my part, two issues were solve using it:
1) failing connection to yahoo in-box
2) downloading large files, usually ftp

gtg for now, tnx

[pebbert9]

I am having the same problem with our DSL Connection.

Downloads usually hang at about the 30Mb mark, even if I click pause and resume on the download manager it doesn't restart the connection.

I am only using NAT with a Firefox browser on XP and Wingate 6.1

I have checked the "Allow recalculation of 0 TCP checksums", no difference.

It acts as if something is timing out.
I had no problems with our Linksys router so I don't think it's my connection.

Any more ideas?

[LMAG]

I'm having the same problem from the clients. I've had it both with ADSL(DHCP= and now DSL(fixed IP).
We are using Wingate 6.1 and NAT.

[xtreme69]

if tcp window is too small w/c may result to communication difficulties (as posted by pascal) ...see if this link/tools can help:

Adjust TCP Window Size

Screenshot

on my part, two issues were solve using it:
1) failing connection to yahoo in-box
2) downloading large files, usually ftp

gtg for now, tnx

Thanks for this, so far it seems to have resolved the download hang problem. What I did, was run the TCP Optimizer, and set it to the optimized settings.

After doing so, NAT was unable to function due to some registry changes I assume, but after just doing an "upgade" install (just installed the same version again, didn't need to uninstall first) everything is running great. Web pages seem more responsive too, but that may be my imagination. Again, thanks a bunch, I've been dealing with this problem for some time now and this has allowed me to see the light at the end of the tunnel.