Revision history [back]

Revision 2

updated 2021-10-29 03:06:15 +0000

Strange Tcp RST flow

Dear all This is not Wireshark problem but hope i can have professional advice about this Strange Tcp RST.

Normal, when recevied un-wanted packet from other sides, device should send TCP RST to other side. But in my case, the modem sometimes send RST even if not received anything from other sides.

Does anybody knows why modem send Tcp RST packet in this case ? Many thank for your help.

2021-10-28 10:24:23.870773  19.252.11.19    60.192.202.127  TCP 172 37198 → 9000 [PSH, ACK] Seq=1161 Ack=3357 Win=135 Len=98 TSval=1503019263 TSecr=382793032

2021-10-28 10:24:24.115796  60.192.202.127  19.252.11.19    TCP 74  9000 → 37198 [ACK] Seq=3357 Ack=1259 Win=61 Len=0 TSval=382793571 TSecr=1503019263

2021-10-28 10:24:29.527818  19.252.11.19    60.192.202.127  TCP 175 37198 → 9000 [PSH, ACK] Seq=1259 Ack=3357 Win=135 Len=101 TSval=1503020263 TSecr=382793571

2021-10-28 10:24:29.772551  60.192.202.127  19.252.11.19    TCP 74  9000 → 37198 [ACK] Seq=3357 Ack=1360 Win=61 Len=0 TSval=382799228 TSecr=1503020263

2021-10-28 10:24:29.772795  60.192.202.127  19.252.11.19    TCP 150 9000 → 37198 [PSH, ACK] Seq=3357 Ack=1360 Win=61 Len=76 TSval=382799228 TSecr=1503020263

2021-10-28 10:24:29.775763  19.252.11.19    60.192.202.127  TCP 74  37198 → 9000 [ACK] Seq=1360 Ack=3433 Win=135 Len=0 TSval=1503020512 TSecr=382799228

2021-10-28 10:24:34.541725  19.252.11.19    60.192.202.127  TCP 74  37198 → 9000 [RST, ACK] Seq=1360 Ack=3433 Win=135 Len=0 TSval=1503025264 TSecr=382799228

Revision 1

ripper

asked 2021-10-29 03:05:21 +0000

Strange Tcp RST flow

Dear all This is not Wireshark problem but hope i can have professional advice about this Strange Tcp RST.

Normal, when recevied un-wanted packet from other sides, device should send TCP RST to other side. But in my case, ~~the~~ i see modem sometimes send RST even if not received anything from other sides.

Does anybody knows why modem send Tcp RST packet in this case ? Many thank for your help.

2021-10-28 10:24:23.870773  19.252.11.19    60.192.202.127  TCP 172 37198 → 9000 [PSH, ACK] Seq=1161 Ack=3357 Win=135 Len=98 TSval=1503019263 TSecr=382793032

2021-10-28 10:24:24.115796  60.192.202.127  19.252.11.19    TCP 74  9000 → 37198 [ACK] Seq=3357 Ack=1259 Win=61 Len=0 TSval=382793571 TSecr=1503019263

2021-10-28 10:24:29.527818  19.252.11.19    60.192.202.127  TCP 175 37198 → 9000 [PSH, ACK] Seq=1259 Ack=3357 Win=135 Len=101 TSval=1503020263 TSecr=382793571

2021-10-28 10:24:29.772551  60.192.202.127  19.252.11.19    TCP 74  9000 → 37198 [ACK] Seq=3357 Ack=1360 Win=61 Len=0 TSval=382799228 TSecr=1503020263

2021-10-28 10:24:29.772795  60.192.202.127  19.252.11.19    TCP 150 9000 → 37198 [PSH, ACK] Seq=3357 Ack=1360 Win=61 Len=76 TSval=382799228 TSecr=1503020263

2021-10-28 10:24:29.775763  19.252.11.19    60.192.202.127  TCP 74  37198 → 9000 [ACK] Seq=1360 Ack=3433 Win=135 Len=0 TSval=1503020512 TSecr=382799228

2021-10-28 10:24:34.541725  19.252.11.19    60.192.202.127  TCP 74  37198 → 9000 [RST, ACK] Seq=1360 Ack=3433 Win=135 Len=0 TSval=1503025264 TSecr=382799228