Carlosdl   29710 pts.  |   Jul 27 2009  5:01PM GMT

What happens if you don’t try to open the PDF document in the browser, but save it to the local file system to open it from there later ?

Erin0201   210 pts.  |   Jul 27 2009  5:43PM GMT

The download says it’s going to take 30+ minutes to download 240kbs and then errors out. We had someone from Cisco say that it looks like the computer here is talking with the server and they both agree to make the connection and agree to close the connection several times when it should only happen once on the initial request. The packets just never come across. We’re not quite sure what’s going on yet. The DSL modem is setup as a bridge and so everything goes through the firewall.

Erin0201   210 pts.  |   Jul 27 2009  6:07PM GMT

We tried a different pdf viewer on the original laptop of the user first experiencing the problem as well as different pcs and different browsers and different versions of adobe acrobat and reader. Our network administrator is located in a remote location and she was able to view the pdfs just fine from her site. It’s definitely something to do with our site, but it’s figuring out what’s going on with the firewall/DSL situation that’s the difficult part.

Carlosdl   29710 pts.  |   Jul 27 2009  7:52PM GMT

Maybe having a deeper look into the network traffic with the help of some protocol analyzer like Wireshark could help.

KevinBeaver   7610 pts.  |   Jul 27 2009  8:36PM GMT

I’m having this issue too - especially within Firefox. I think something has become corrupt in my Adobe installation.

Erin0201   210 pts.  |   Jul 28 2009  11:11AM GMT

We did do some capturing and are viewing with Wireshark. There seems to be a lot of duplicate acknowledgments going on. We’re waiting for the Cisco engineer to get back to us with another solution, but we’re starting to wonder if there could be an issue with duplexing either with our firewall or with our new hp procurve switches.

Everything is set to auto and it all says that everything is communicating 100/full duplex, but could leaving it on auto be a problem anyway?

Do you know what else could cause a lot of DUP ACKs? For instance when we make one request for a pdf the client pcs here keep opening and closing the connection to the remote server over and over as if we were making multiple requests, but we’re not.

I don’t think it is our adobe installations at all since this happens on several different computers with different versions of acrobat and reader having been tested. We’ve also tested pcs connected to different switches. Signs seem to point to the firewall being the issue since we have tried different switches. We’re just not sure what the problem could be on the firewall.

Thanks everyone for your help so far!
Erin0201

Troy Tate   0 pts.  |   Jul 28 2009  11:48AM GMT

Dup ACKs typically means packet loss. The link may be overutilized or as you suggest duplex/speed mismatch. Always hard set links to routers and between switches. Autosense can create problems. Also check MTU settings within the devices along the path you control. This may require contacting your internet provider. I would recommend an MTU setting of no more than 1400 bytes. This will ensure that the packets leaving your network are standard size packets and don’t have to get fragmented further at the network edge.

Erin0201   210 pts.  |   Jul 28 2009  12:56PM GMT

I double checked with our network administrator and our MTU settings have already been double checked and don’t seem to be the problem.

The network admin says that the Cisco engineer helped her to configure the firewall to not block anything and test and we still had the issue. We haven’t physically removed the firewall though, so we can’t be 100% positive.

We’re talking about setting our duplexing on the firewall, router, and switches all to full, but the network admin wants to wait until an evening or weekend to make sure this wouldn’t cause the network to go down completely.
I tested turning the duplexing to full on just the port to my laptop from the hp switch and it caused a disconnect/reconnect, but that was it.

I won’t know for awhile if setting static duplexing settings will help. We’re still waiting to hear some good news from the Cisco engineer on what more he might have come up with. Is there anything else that might cause packet loss other than MTU settings and duplex speeds?

Thanks for the advice and suggestions so far everyone. Hopefully we’ll get this figured out soon and it’s something easy that we missed!
Erin0201

Petkoa   1005 pts.  |   Jul 28 2009  3:17PM GMT

Do you have a proxy which by chance may have a default configuration with some traffic shaping/file size limiting/QoS decisioning?

Petko

Erin0201   210 pts.  |   Jul 28 2009  3:43PM GMT

We don’t have a proxy, but are using OpenDNS for content filtering. The settings on OpenDNS were the first thing we looked at. Our network administrator also utilizes OpenDNS at her site and they are configured the same.

Petkoa   1005 pts.  |   Jul 29 2009  2:45PM GMT

Never used OpenDNS and didn’t know it offers content filtering… So googled and look what jumped-out:

…Hosting provider SoftLayer was partially taken down this morning from a DDOS attack, and several well known websites, including TechMeme and TwitPic, went down with it.

The problem at SoftLayer was resolved, but some users of OpenDNS, a DNS service provider that is becoming more and more popular, still can’t reach those websites. The reason? OpenDNS caches IP addresses for domain names on a user’s computer, and they’ve cached a bunch of bad DNS entries now on these computers. This speeds up web surfing considerably, and has helped some users avoid major outages at the ISP level in the past. But in cases like today, with outages at the hosting level, the bad IP information ends up being cached for up to a day.

Users who know what’s going on can reboot their computers to clear the cache, but that’s clearly not a good overall solution. OpenDNS says they are turning on a feature called SmartCache that caches both the current and “last good” IP address, so situations like today won’t be an issue any longer…

Petkoa   1005 pts.  |   Jul 29 2009  2:51PM GMT

The site editor again chewed the source link :o(( Here it is, hopefully:

 <a href="http://www.techcrunch.com/2009/07/28/downside-of-opendns-it-can-extend-website-outages/" title="http://www.techcrunch.com/2009/07/28/downside-of-opendns-it-can-extend-website-outages/" target="_blank">http://www.techcrunch.com/2009/07/28/dow…</a>

Petko

Erin0201   210 pts.  |   Jul 30 2009  12:36PM GMT

Thanks for the information on OpenDNS Petko!

However, both of our sites use the openDNS system and our other site isn’t having the problem accessing pdfs from pdpworks. If it takes reboots of computers to clear the cache, well it’s been a week since we first started having the issue and there have been several reboots.

Friday (tomorrow) we are going to set our firewall to 100 full duplex instead of auto and see if that helps at all. If not, we’re going to temporarily try connecting the firewall directly to the testpc and bypass all of our switches and routers and see if the pc can connect to pdpworks and download a pdf that way. If it still doesn’t work then we at least get to narrow down the problem to the firewall and/or DSL modem.

It’s just weird that the user was able to get a pdf a couple of months ago from this site and now no one in the building can get one to download or open.

I’m hoping it’s just the firewall since it is pretty old and has been marked for replacement soon anyway.

Thanks for the help and advice so far everyone. I’ll keep you updated as to a resolution!
Erin0201