Ask Your Question
0

Client loses connection to server according to vendor

asked 2020-03-30 15:21:53 +0000

Musky3913 gravatar image

updated 2020-03-30 16:49:49 +0000

SYN-bit gravatar image

I have attached packet capture https://drive.google.com/file/d/1QXeU...

Packet 9205 has the CWR bit set around the time of the problem

edit retag flag offensive close merge delete

Comments

Please add some context:

  • What is the IP of the client?
  • What is the IP of the server?
  • Which conversation has the problem (please list stream number or port numbers)
SYN-bit gravatar imageSYN-bit ( 2020-03-30 16:54:44 +0000 )edit

1 Answer

Sort by ยป oldest newest most voted
0

answered 2020-03-30 17:02:12 +0000

SYN-bit gravatar image

I'm assuming 10.118.1.201 is the client, as it makes a new connection to 10.3.213.15 in frame 9205. Before that, it killed the previous connection on port 50000 by sending a TCP RST in frame 8721. Why it was sending the TCP RST can not be read from the packet capture file. From the capture point of view, it is the client that resetted the connection and then opened a new one 3 minutes later.

You could look into the application logs if there are any. Maybe a debug llog level can be chosen to increase the logging.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2020-03-30 15:21:53 +0000

Seen: 67 times

Last updated: Mar 30