Ask Your Question
0

Disconnection issues and what could be causing them.

asked 2021-02-16 11:53:55 +0000

YasithHashen gravatar image

Hi There,

I would like to get some support/guidance in understanding the disconnection issues I'm observing and what could be the reason causing them.

packet capture : https://www.cloudshark.org/captures/f...

Appreciate the support.

Regards, Yasith.

edit retag flag offensive close merge delete

Comments

@YasithHashen Unfortunately I can't view your capture on cloudshark, did you mark it as public?

SYN-bit gravatar imageSYN-bit ( 2021-02-16 14:43:45 +0000 )edit

@SYN-bit Yes, I have made the file public now. Appreciate your support.

YasithHashen gravatar imageYasithHashen ( 2021-02-17 02:32:02 +0000 )edit

A 'disconnection problem' is a very open problem description, as there are quite a few sessions in your capture, what kind of disconnection problems do you mean? Please narrow it down to ip-addresses if possible...

SYN-bit gravatar imageSYN-bit ( 2021-02-17 08:39:01 +0000 )edit

Hi there, The capture is basically a general internet browsing capture. Host IP 192.168.1.78. Basically the disconnections are observed towards general internet browsing.

YasithHashen gravatar imageYasithHashen ( 2021-02-18 02:49:52 +0000 )edit

Are you facing any issues during surfing, or have you only noticed the RST packets in your capture?

Most of the RST are coming from your client as an answer to a packet from 212.103.48.119:9002, that seems to belong to no known session. That's a bit strange because this packet shouldn't have made it through your router as long as there's no matching state. Or have you enabled port forwarding for port TCP/9002 on your router?

There are some other RSTs in your capture but from my point of view they're not really critical. Could have to do with the wrong date settings on your computer. Or is the capture really from July 2020?

JasMan gravatar imageJasMan ( 2021-02-18 20:45:40 +0000 )edit

1 Answer

Sort by ยป oldest newest most voted
0

answered 2021-02-23 07:32:38 +0000

JasMan gravatar image

The client 192.168.1.78 get no response to his ARP request for 192.168.1.254. That's why the client is not able to find the gateway and DNS resolver anymore.

The reason for this is unknown. As we can't see any incoming packets after frame 23254, the client could have lost his network connection. Or a central switch or the router itself is offline.

edit flag offensive delete link more

Comments

@JasMan Thank you for your feedback.

YasithHashen gravatar imageYasithHashen ( 2021-02-24 09:26:43 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

2 followers

Stats

Asked: 2021-02-16 11:53:55 +0000

Seen: 115 times

Last updated: Feb 23