Hello everyone,
I am not directly an administrator for checkpoint FW-1 at our
institution, but we are experiencing problems with HTTP file uploads of
significant sizes (say over 1Megs). I am asking this question in order
to be better prepared and help the administrators fix this problem.
Every time a user on the internal network tries to upload large files,
they seem to stall in between. The stall point is very random (for
example, trying to upload a 20 Meg file 4 times, you could end up with
2megs, 5.4megs, 10megs, 19megs on the receiving end, and eventually with
some tries, the upload would go through fine). It should be noted that
this sort of upload problem only happens through HTTP, no such
intermittent connection issues exists when using SSH (scp), or FTP
protocols.
Since this was reproducible, I fired up ethereal (on a machine in the
internal network that will start upload), and I started capturing
packets to analyze why the upload was failing. Nearly every time the
upload failed, I saw the following series of events in ethereal:
TCP Dup ACK (sent from server to local)
TCP Retransmission (from local to server)
Continuation or non-HTTP traffic (from local to server)
TCP Dup ACK (server to local)
..
..
Continues
I've posted a screenshot of the ethereal program on the following URL
for your examination:
http://www.cure4kids.org/failed_http_upload_capture.png
The reason why I am suspecting FW-1's fault is because this upload
problem only occurs at our institution. If I try uploading from outside,
it works normally with virtually any size file.
Your help is greatly appreciated!
- Aman Patel, Sys Admin / Database / Web Developer, International
Outreach x4076
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
