Finding out the cause for a connection reset

asked 2020-07-11 11:40:28 +0000

SectionOne
1 ●1 ●1

updated 2020-07-11 11:41:41 +0000

I have connections on several ports that are being "forcefully closed".

In Wireshark I see these connections in red background with yellow text color.

How can I find the reason?

These are all connections for 127.0.0.1 so I don't believe a firewall is involved.

I believe there is some software closing it and I want to find out which one.

answered 2020-07-11 18:01:47 +0000

grahamb

flag of United Kingdom of Great Britain and Northern Ireland

23835 ●4 ●973 ●227 https://www.wireshark.org

updated 2020-07-11 18:02:20 +0000

Wireshark cannot tell you why the RST was transmitted, that will be down to the OS or application using the socket. The usual cause is that the socket has been closed.

Note that a RST isn't necessarily bad, it is (mis)used as a fast way of closing a connection.

edit flag offensive delete link

Comments

Well, I do have a problem with someone closing connections to some ports all the time.

So how can I find out who is doing that?

SectionOne ( 2020-07-12 08:31:06 +0000 )edit

How do you know there's a problem? Is an application misbehaving or reporting errors?

grahamb ( 2020-07-13 10:00:32 +0000 )edit

add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Finding out the cause for a connection reset

1 Answer

Comments

Your Answer

Question Tools

Stats

Finding out the cause for a connection reset edit

1 Answer

Comments

Your Answer

Question Tools

Stats

Finding out the cause for a connection reset