From: grahn+nntp@snipabacken.se   
      
   On Wed, 2012-05-30, Martijn Lievaart wrote:   
   > On Tue, 29 May 2012 18:54:19 +0000, Rick Jones wrote:   
   >   
   >> adirtymindisajoyforever  wrote:   
   >>> And traces are taken on the senders side.   
   >>   
   >>> strace shows connect at time T, trace in tcpdump show SYN at T + 3   
   >>> seconds.   
   >>   
   >> Is the ARP cache above or below the packet capture point?  If these are   
   >> all to the same destiantion, and there was no ARP entry, perhaps some of   
   >> them got tossed at the ARP resolution and what is being seen is the   
   >> retransmission.   
   >   
   > Retransmission should be after 0.3 seconds, not 3 seconds, so highly   
   > unlikely.   
      
   Still it gives the OP new debugging ideas ...   
   Another thing to try (among many): ask the client to connect   
   to localhost instead, (a) with no server running and (b) with   
   netcat listening on the server port. Then strace/tcpdump that.   
      
   /Jorgen   
      
   --   
     // Jorgen Grahn    O  o   .   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)