On Jul 12, 2007, at 11:42 AM, Brian Knoll ((TTNET)) wrote: > If the receiver is sending a DUP ACK, then the sender either never > received the first ACK or it didn't receive it within the timeframe it > expected. or received it out of order. Yes, a tcpdump trace is the first step.