用Wireshark抓包分析超過70秒的請求


超過70秒的請求是通過分析IIS日志發現的:

10.159.63.104是SLB的內網IP。

通過Wireshark抓包分析請求是9:22:21收到的(tcp.stream eq 23080):

09:22:21.299838000    10.159.63.104    10.161.241.208    HTTP    291    GET /eastsea/p/3764040.html HTTP/1.0 

這個請求響應內容的長度是:Content-Length 1154110(1.1MB)

雲服務器(ECS)在收到請求后,發了一個ACK包:

09:22:21.354730000    10.161.241.208    10.159.63.104    TCP    66    http > 60895 [ACK] Seq=1 Ack=226 Win=66560 Len=0 TSval=16270579 TSecr=1049527471

接下來就是一堆的TCP segment of a reassembled PDU:

10.161.241.208    10.159.63.104    TCP    1514    [TCP segment of a reassembled PDU]

中間會出現一些錯誤:

1. TCP Dup ACK

10.159.63.104    10.161.241.208    TCP    78    [TCP Dup ACK 619713#1] 60895 > http [ACK] Seq=226 Ack=57921 Win=61440 Len=0 TSval=1049527542 TSecr=16270581 SLE=63713 SRE=75297

2. TCP Out-Of-Order

10.161.241.208    10.159.63.104    TCP    1514    [TCP Out-Of-Order] [TCP segment of a reassembled PDU]

3. TCP Fast Retransmission

10.161.241.208    10.159.63.104    TCP    1514    [TCP Fast Retransmission] [TCP segment of a reassembled PDU]

另外,中間也出現了大量的TCP Window Update:

10.159.63.104    10.161.241.208    TCP    66    [TCP Window Update] 60895 > http [ACK] Seq=226 Ack=175209 Win=16384 Len=0 TSval=1049528183 TSecr=16270632

最后在9:23:32才完成了響應內容的發送:

09:23:32.865387000    10.161.241.208    10.159.63.104    HTTP    486    HTTP/1.1 200 OK  (text/html)

Wireshark中記錄的中整個發送耗時:

Time since request: 71.565549000 seconds


免責聲明!

本站轉載的文章為個人學習借鑒使用,本站對版權不負任何法律責任。如果侵犯了您的隱私權益,請聯系本站郵箱yoyou2525@163.com刪除。



 
粵ICP備18138465號   © 2018-2025 CODEPRJ.COM