Root cause of client send RST?
The client run on a K8s node , wose port is 1864 , and the server port is 5432 ,a PostgreSQL server. Frame 27422 send reset to server,and the slient still send andou 2000 frame the server. And I how to analyze the root cause of frame 27422? Why client send RESET?
27416 2024-06-06 16:38:49.628021 172.16.67.222 1864 172.16.68.139 292271853 TCP 73 1864 → 5432 [PSH, ACK] Seq=26185778 Ack=33481796 Win=838912 Len=5 TSval=990578744 TSecr=3450689461 [TCP segment of a reassembled PDU]
27417 2024-06-06 16:38:49.628024 172.16.68.139 5432 172.16.67.222 3135413987 TCP 68 5432 → 1864 [ACK] Seq=33481796 Ack=26185783 Win=147712 Len=0 TSval=3450689462 TSecr=990578744
27418 2024-06-06 16:38:49.628027 172.16.67.222 1864 172.16.68.139 292271858 PGSQL 21488 >4
27419 2024-06-06 16:38:49.628036 172.16.67.222 1864 172.16.68.139 292293278 PGSQL 15492 >4
27420 2024-06-06 16:38:49.628089 172.16.67.222 1864 172.16.68.139 292308702 PGSQL 1496 >0
27421 2024-06-06 16:38:49.628153 172.16.67.222 1864 172.16.68.139 292310130 PGSQL 4357 >7
**27422 2024-06-06 16:38:49.628156 172.16.67.222 1864 172.16.68.139 292076663 TCP 56 1864 → 5432 [RST] Seq=25990588 Win=0 Len=0**
27423 2024-06-06 16:38:49.628200 172.16.67.222 1864 172.16.68.139 292314419 PGSQL 1496 >8
27424 2024-06-06 16:38:49.628214 172.16.67.222 1864 172.16.68.139 292315847 PGSQL 4352 >8
27425 2024-06-06 16:38:49.628226 172.16.67.222 1864 172.16.68.139 292320131 PGSQL 7208 >
27426 2024-06-06 16:38:49.628272 172.16.67.222 1864 172.16.68.139 292327271 PGSQL 1496 >4
As usual with application issues, Wireshark can tell you what happened but not why. Sometimes the why can be inferred from the traffic but mostly you need application level log files.