Hi There,
I would like to get some support/guidance in understanding the disconnection issues I'm observing and what could be the reason causing them.
packet capture : https://www.cloudshark.org/captures/f...
Appreciate the support.
Regards, Yasith.
The client 192.168.1.78 get no response to his ARP request for 192.168.1.254. That's why the client is not able to find the gateway and DNS resolver anymore.
The reason for this is unknown. As we can't see any incoming packets after frame 23254, the client could have lost his network connection. Or a central switch or the router itself is offline.
Asked: 2021-02-16 11:53:55 +0000
Seen: 715 times
Last updated: Feb 23 '21
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.
@YasithHashen Unfortunately I can't view your capture on cloudshark, did you mark it as public?
@SYN-bit Yes, I have made the file public now. Appreciate your support.
A 'disconnection problem' is a very open problem description, as there are quite a few sessions in your capture, what kind of disconnection problems do you mean? Please narrow it down to ip-addresses if possible...
Hi there, The capture is basically a general internet browsing capture. Host IP 192.168.1.78. Basically the disconnections are observed towards general internet browsing.
Are you facing any issues during surfing, or have you only noticed the RST packets in your capture?
Most of the RST are coming from your client as an answer to a packet from 212.103.48.119:9002, that seems to belong to no known session. That's a bit strange because this packet shouldn't have made it through your router as long as there's no matching state. Or have you enabled port forwarding for port TCP/9002 on your router?
There are some other RSTs in your capture but from my point of view they're not really critical. Could have to do with the wrong date settings on your computer. Or is the capture really from July 2020?