IDENTIFYING VALID

RETRANSMISSIONS
ERROR THRESHOLDS
 ERROR THRESHOLDS

• 10% OF TRAFFIC LOST

ERROR SOURCES: CABLING
 ERROR SOURCES: CABLING

1. FIBER OPTIC: < 0.0001%

 ERROR SOURCES: CABLING

1. FIBER OPTIC: < 0.0001%

2. COPPER: < 0.15%
 ERROR SOURCES: CABLING

1. FIBER OPTIC: < 0.0001%

2. COPPER: < 0.15%
3. WIRELESS: < 10%
 ERROR SOURCES: CABLING

1. FIBER OPTIC: < 0.0001%

2. COPPER: < 0.15%
3. WIRELESS: < 10%

HTTPS://WWW.NETCRAFTSMEN.COM/APPLICATION-ANALYSIS-USING-TCP-RETRANSMISSIONS-PART-1/
ERROR SOURCES: LINK FLAP
ERROR SOURCES: LINK FLAP
ERROR SOURCES: LINK FLAP
 ERROR SOURCES: LINK FLAP

HEAVY RETRANSMISSIONS
 ERROR SOURCES: LINK FLAP

HEAVY RETRANSMISSIONS

NO RETRANSMISSIONS
BETWEEN CLIENTS
ERROR SOURCES: BRIDGING LOOPS
ERROR SOURCES: BRIDGING LOOPS

Switch 1

Switch 2 Switch 3
PC1 PC2
ERROR SOURCES: BRIDGING LOOPS

Switch 1

Switch 2 Switch 3
PC1 PC2
ERROR SOURCES: BRIDGING LOOPS

Switch 1

Switch 2 Switch 3
PC1 PC2
ERROR SOURCES: BRIDGING LOOPS

Switch 1

Switch 2 Switch 3
PC1 PC2
ERROR SOURCES: BRIDGING LOOPS

Switch 1

Switch 2 Switch 3
PC1 PC2
ERROR SOURCES: BRIDGING LOOPS

Switch 1

Switch 2 Switch 3
PC1 PC2
 IDENTIFYING BRIDGING LOOPS

SOURCE-DESTINATION-PROTOCOL 5 TUPLE
1. SOURCE IP ADDRESS
2. DESTINATION IP ADDRESS
3. LAYER 4 PROTOCOL (TCP)
4. SOURCE PORT
5. DESTINATION PORT
ERROR SOURCES: ROUTING LOOPS
 192.168.2.0/24

172.16.1.1 172.16.1.2
192.168.2.1

Router A 172.16.1.0/24
Router B
172.16.2.1

ROUTING TABLE ROUTING TABLE

DESTINATION GATEWAY 172.16.2.0/24 DESTINATION GATEWAY
0.0.0.0/0 172.16.1.2 0.0.0.0/0 172.16.1.1
192.168.5.0/24 172.16.2.2

172.16.2.2

ROUTING TABLE
DESTINATION GATEWAY
Router C 0.0.0.0/0 172.16.2.1
192.168.5.0/24
RETRANSMISSIONS: FIREWALLS
 RETRANSMISSIONS: FIREWALLS

1. COMMON WITH PROTOCOLS THAT USE SECONDARY CONNECTIONS (FTP,

RPC, ETC.)
 RETRANSMISSIONS: FIREWALLS

1. COMMON WITH PROTOCOLS THAT USE SECONDARY CONNECTIONS (FTP,

RPC, ETC.)
2. DETECT WITH SIMULTANEOUS CAPTURE TECHNIQUE