We have several remote sites connecting to a central location. Each remote site has its own file and print server hosted at the central location as vi rtual machines. Recently, we've been having problems pulling data from one of these servers (e.g., getting directory listing containing large amounts of files and folders), but only from machines at the central site. Users at the remote site who have been assigned this particular server have not rep orted any problems. All other servers have been behaving fine, and I can't see how this one server is different from the others.
Captures near the server show normal behavior until it comes time to actual ly send the directory contents, then there are repeated attempts to transmi t the data, followed by a [RST,ACK]. Captures near the machine browsing the directory show just the [RST, ACK]. I've done captures in various points i n the intervening network and I think I've found the spot where it's not se nding data any further, even though all other connectivity to this machine is fine (I'm using my workstation for testing).
The last spot the retransmitted packets get to, the source and destination ips seem correct, and layer 2 info shows the source as being the switch at the remote site the packet came from, and the destination seems to be the M AC address associated with the vlan that the browsing machine is a part of. Packets seem to be dropped somewhere around this point. Captures at the in terface where the packets should leave to head to the browsing machine show everything but the retransmitted packets. Again, the machine doing the bro wsing has normal connectivity for all other things.
How can I find out why the packets are getting dropped?