From: m@rtij.nl.invlalid   
      
   On Tue, 29 May 2012 18:54:19 +0000, Rick Jones wrote:   
      
   > adirtymindisajoyforever  wrote:   
   >> And traces are taken on the senders side.   
   >   
   >> strace shows connect at time T, trace in tcpdump show SYN at T + 3   
   >> seconds.   
   >   
   > Is the ARP cache above or below the packet capture point?  If these are   
   > all to the same destiantion, and there was no ARP entry, perhaps some of   
   > them got tossed at the ARP resolution and what is being seen is the   
   > retransmission.   
      
   Retransmission should be after 0.3 seconds, not 3 seconds, so highly   
   unlikely.   
      
   M4   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)