Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

answered 2024-07-08 07:58:57 +0000

SYN-bit gravatar image

Not knowing the exact nature of your infrastructure, I can only make some guesses based on the provided information.

  • The client (10.11.96.19) opens a TCP connection to 172.16.203.144, which seems to be terminated on a device that is configured to forward the connection to 10.13.2.3.
  • This device tries to open a connection to 10.13.2.3 for 10 seconds (delta time between frame 3 and frame 4), but it does not succeed in time (see the part [Connect timed out.] in the error message in frame 4
  • From a TCP standpoint, there are 4 bytes missing in the packet capture, as the TCP sequence number jumps from 1 to 5 between packet 2 and 4, if this is consistently happening, that most likely is a bug on the device.

To analyze this a little more in detail, could you make a capture on the forwarding device (172.16.203.144) and include both the traffic between 10.11.96.19 and that device as well as the traffic between the device and 10.13.2.3 in the packet capture.

Then please share the file on a public filesharing service.