 | 1 | initial version |
If you do not see the final ACK of the 3-way-handshake and only see SYN, SYNACK repeatedly, then either 1.1.1.1 is not receiving the SYN/ACK or it is and it is not sending the final ACK or the final ACK from 1.1.1.1 to 2.2.2.2 is blocked between 1.1.1.1 and the capture point.
You will have to focus your investigation to the host 1.1.1.1 and the part of the network between 1.1.1.1 and the point where you made the capture.
