Multiple Retransmissions?

rkruz1234 · ‎05-21-2009

I am looking at captured data on a Ethernet link between routers (using Wireshark). Its a private network with a single application running.

I see these multiple sequences of retransmits at 0.4, .8. 1.6 and 3.2 seconds separation. Many of these sequences are present with the exact same timing. That seems to me like collision avoidance protocols but this is a point to point link. The Protocol that Wireshark identifies these retransmits is GIOP.

Any thoughts on what these retransmits are all about?

Giuseppe Larosa · ‎05-24-2009

Hello Robert,

I've found the following document describing GIOP protocol.

It is part of CORBA architecture.

http://www2.informatik.hu-berlin.de/~obecker/Lehre/SS2001/CORBA/specs/01-02-51.pdf

From a networking point of view these messages are application-specific.

Note:

seen multiple copies of the same frame is possible in some SPAN setups and it is not related to the type of traffic/application involved.

Hope to help

Giuseppe

rkruz1234 · ‎05-25-2009

thank you, I will look the document over