Hi!
I have a Cisco IronPort S170. All work fine but if I capture WEB traffic, I see many Duplicate ACK segments.
Without proxy, I do not see this segments.
It is package has different IP identifier - it is a guarantee that this packets not been replicated by other network equipment and originate by IronPort.
Also, I see SACK Permitted option in the TCP handshake (both in the SYN and SYN-ACK)
What is it?
I attached pictures with the packets
Thank!
--------------------------------------------------------------------------
Helping seriously ill children, all together. All information about this, is posted on my blog
