The TCP window size will be 1,073,725,440 bytes (8.5 gigabits). A scale factor of 14 results in a TCP window size of 14 (the maximum offset allowed). If anyone can spare some time to analysis the capture, and share any insights, I'd be most grateful.Īlthough my current setup now uses Sophos XG, in the last two weeks, I've had the same issues with OPNsense and pfSense firewalls. TCP window size TCP window size in bytes (2scale factor) Heres the calculation for a window scale factor of 3 and a window size of 65,535: 65,535 (23) 262,140 bytes. If anyone can spare some time to analyis analysis the capture, and share any insights, I'd be most grateful. Sometimes the allow rule denies the packet with the message "Invalid TCP state".Īs I said, rather convoluted, so here is a diagram:
In turn, they are connected to a Cisco switch (SG300) where the two relevant switchports are LAG'd.Įvery now and then a packet gets through, however, traffic is typically dropped from the VCSA to the ESX hosts. The network interfaces in question are teamed (LACP) and presented to VMware Workstation as a bridge. The issue seems to be coming from the VMware Virtual Server Appliance (VCSA) which is hosted in VMware Workstation that runs on a physical Windows Server 2016 box. In network terms, the current setup is rather convoluted and I'm hoping someone might be able to help analyse the packet capture, taken from the firewall, to determine the root cause.
I have installed a new Sophos XG firewall on my network and I have an issue with packets being dropped due to "bad TCP" between two devices that reside on different VLANs.
0 kommentar(er)
