Ask Your Question
0

Finding out the cause for a connection reset

asked 2020-07-11 11:40:28 +0000

SectionOne gravatar image

updated 2020-07-11 11:41:41 +0000

I have connections on several ports that are being "forcefully closed".

In Wireshark I see these connections in red background with yellow text color.

How can I find the reason?

These are all connections for 127.0.0.1 so I don't believe a firewall is involved.

I believe there is some software closing it and I want to find out which one.

edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted
0

answered 2020-07-11 18:01:47 +0000

grahamb gravatar image

updated 2020-07-11 18:02:20 +0000

Wireshark cannot tell you why the RST was transmitted, that will be down to the OS or application using the socket. The usual cause is that the socket has been closed.

Note that a RST isn't necessarily bad, it is (mis)used as a fast way of closing a connection.

edit flag offensive delete link more

Comments

Well, I do have a problem with someone closing connections to some ports all the time.

So how can I find out who is doing that?

SectionOne gravatar imageSectionOne ( 2020-07-12 08:31:06 +0000 )edit

How do you know there's a problem? Is an application misbehaving or reporting errors?

grahamb gravatar imagegrahamb ( 2020-07-13 10:00:32 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

Stats

Asked: 2020-07-11 11:40:28 +0000

Seen: 57 times

Last updated: Jul 12