Modbus TCP [Retransmission], [RST]

asked 2023-05-08 10:12:53 +0000

Ramu
1

I'm new to wireshark and packet capturing and was wondering if someone here could help me understand what i'm looking at how to understand the captured file. Captured file is attached

We have a setup where communication from our software(Client) is disrupted randomly to a PLC over modbus TCP connection. The PLC and Client are on different locations, communicated over internet(cloud) as sketched on the drawing, I have also inserted a trace route if its of any help.

The fault i'm trying to understand start from timeline 09:53:29 as seen from screenshot below.

image: Setup

image: alt text

link:Log.pcapng

answered 2023-05-08 11:00:22 +0000

hugo.vanderkooij
76 ●190 ●4

The packet capture hints at packet loss. However as you only see the packets at one end of what seems like a multihop connection there is no telling where things went wrong.

Reset with capturing op as many steps including the client and the host and compare them. So if anythnig stcks out as seeing packet going out on client but never arrive at server.

The more steps in between you can measure the better the insight into the cause will be.

But if the network in between is not in your span of control you may end up haveing a tough conversation about network quality issues.

edit flag offensive delete link

Comments

Hi Hugo, thanks for the answer. I was also leaning towards packet loss because of the tcp retransmission. And as you said the network in between is not in my control, but how can I narrow down as much as possible to where this problem lies. I think I will be to do a packet capture on the other end also, but thats it. Is it a way to find out if this is related to the PLC?

Ramu ( 2023-05-08 14:25:07 +0000 )edit

add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Modbus TCP [Retransmission], [RST]

1 Answer

Comments

Your Answer

Question Tools

Stats

Related questions

Modbus TCP [Retransmission], [RST] edit

1 Answer

Comments

Your Answer

Question Tools

Stats

Related questions

Modbus TCP [Retransmission], [RST]