First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
Ask Your Question
0

Client loses connection to server according to vendor

I have attached packet capture https://drive.google.com/file/d/1QXeU...

Packet 9205 has the CWR bit set around the time of the problem

Musky3913's avatar
1
Musky3913
asked 2020-03-30 15:21:53 +0000
SYN-bit's avatar
18.5k
SYN-bit
updated 2020-03-30 16:49:49 +0000
edit flag offensive 0 remove flag close merge delete

Comments

Please add some context:

  • What is the IP of the client?
  • What is the IP of the server?
  • Which conversation has the problem (please list stream number or port numbers)
SYN-bit's avatar SYN-bit (2020-03-30 16:54:44 +0000) edit
more
  • delete
add a comment see more comments

1 Answer

0

I'm assuming 10.118.1.201 is the client, as it makes a new connection to 10.3.213.15 in frame 9205. Before that, it killed the previous connection on port 50000 by sending a TCP RST in frame 8721. Why it was sending the TCP RST can not be read from the packet capture file. From the capture point of view, it is the client that resetted the connection and then opened a new one 3 minutes later.

You could look into the application logs if there are any. Maybe a debug llog level can be chosen to increase the logging.

SYN-bit's avatar
18.5k
SYN-bit
answered 2020-03-30 17:02:12 +0000
edit flag offensive 0 remove flag delete link
more

Comments

add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer