Client loses connection to server according to vendor

asked 2020-03-30 15:21:53 +0000

Musky3913
1 ●1 ●3 ●2

updated 2020-03-30 16:49:49 +0000

SYN-bit

18528 ●9 ●343 ●255 https://SYN-b.it

I have attached packet capture https://drive.google.com/file/d/1QXeU...

Packet 9205 has the CWR bit set around the time of the problem

edit retag flag offensive close merge delete

Comments

Please add some context:

What is the IP of the client?
What is the IP of the server?
Which conversation has the problem (please list stream number or port numbers)

SYN-bit ( 2020-03-30 16:54:44 +0000 )edit

add a comment

1 Answer

Sort by » oldest newest most voted

answered 2020-03-30 17:02:12 +0000

SYN-bit

18528 ●9 ●343 ●255 https://SYN-b.it

I'm assuming 10.118.1.201 is the client, as it makes a new connection to 10.3.213.15 in frame 9205. Before that, it killed the previous connection on port 50000 by sending a TCP RST in frame 8721. Why it was sending the TCP RST can not be read from the packet capture file. From the capture point of view, it is the client that resetted the connection and then opened a new one 3 minutes later.

You could look into the application logs if there are any. Maybe a debug llog level can be chosen to increase the logging.

edit flag offensive delete link

add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2020-03-30 15:21:53 +0000

Seen: 223 times

Last updated: Mar 30 '20

Client loses connection to server according to vendor edit