Root cause of client send RST?

asked 2024-06-24 00:52:39 +0000

updated 2024-06-24 09:28:07 +0000

grahamb gravatar image

The client run on a K8s node , wose port is 1864 , and the server port is 5432 ,a PostgreSQL server. Frame 27422 send reset to server,and the slient still send andou 2000 frame the server. And I how to analyze the root cause of frame 27422? Why client send RESET?

27416   2024-06-06 16:38:49.628021  172.16.67.222   1864    172.16.68.139   292271853   TCP 73      1864 → 5432 [PSH, ACK] Seq=26185778 Ack=33481796 Win=838912 Len=5 TSval=990578744 TSecr=3450689461 [TCP segment of a reassembled PDU]

27417   2024-06-06 16:38:49.628024  172.16.68.139   5432    172.16.67.222   3135413987  TCP 68      5432 → 1864 [ACK] Seq=33481796 Ack=26185783 Win=147712 Len=0 TSval=3450689462 TSecr=990578744

27418   2024-06-06 16:38:49.628027  172.16.67.222   1864    172.16.68.139   292271858   PGSQL   21488       >4

27419   2024-06-06 16:38:49.628036  172.16.67.222   1864    172.16.68.139   292293278   PGSQL   15492       >4

27420   2024-06-06 16:38:49.628089  172.16.67.222   1864    172.16.68.139   292308702   PGSQL   1496        >0

27421   2024-06-06 16:38:49.628153  172.16.67.222   1864    172.16.68.139   292310130   PGSQL   4357        >7

**27422 2024-06-06 16:38:49.628156  172.16.67.222   1864    172.16.68.139   292076663   TCP 56      1864 → 5432 [RST] Seq=25990588 Win=0 Len=0**

27423   2024-06-06 16:38:49.628200  172.16.67.222   1864    172.16.68.139   292314419   PGSQL   1496        >8

27424   2024-06-06 16:38:49.628214  172.16.67.222   1864    172.16.68.139   292315847   PGSQL   4352        >8

27425   2024-06-06 16:38:49.628226  172.16.67.222   1864    172.16.68.139   292320131   PGSQL   7208        >

27426   2024-06-06 16:38:49.628272  172.16.67.222   1864    172.16.68.139   292327271   PGSQL   1496        >4
edit retag flag offensive close merge delete

Comments

As usual with application issues, Wireshark can tell you what happened but not why. Sometimes the why can be inferred from the traffic but mostly you need application level log files.

grahamb gravatar imagegrahamb ( 2024-06-24 09:29:40 +0000 )edit