I'm seeing 3way handshake getting rejected. can anyone help?

asked 2018-10-04 10:29:04 +0000

anonymous user

Anonymous

updated 2018-10-04 10:38:08 +0000

grahamb gravatar image

9924 2018-10-04 14:39:56.598520 0.005235 172.19.22.66 172.19.1.202 175 TCP 443 45168 https > 45168 [ACK] Seq=79965 Ack=14083 Win=42006 Len=0 TSV=1047939439 TSER=727588089 9926 2018-10-04 14:39:56.599133 0.000613 172.19.22.66 172.19.1.202 175 TCP 443 45168 https > 45168 [ACK] Seq=79965 Ack=14609 Win=42532 Len=0 TSV=1047939440 TSER=727588089 9947 2018-10-04 14:39:56.643519 0.044386 172.19.22.66 172.19.1.202 175 TCP 443 45166 https > 45166 [ACK] Seq=69822 Ack=9328 Win=53935 Len=0 TSV=1047939484 TSER=727588100 9952 2018-10-04 14:39:56.651745 0.008226 172.19.22.66 172.19.1.202 520 TLSv1.2 443 45168 Application Data 9953 2018-10-04 14:39:56.651906 0.000161 172.19.22.66 172.19.1.202 1278 TLSv1.2 443 45168 Application Data 9954 2018-10-04 14:39:56.651917 0.000011 172.19.22.66 172.19.1.202 209 TLSv1.2 443 45168 Application Data 9957 2018-10-04 14:39:56.654521 0.002604 172.19.22.66 172.19.1.202 520 TLSv1.2 443 45174 Application Data 9958 2018-10-04 14:39:56.654646 0.000125 172.19.22.66 172.19.1.202 1270 TLSv1.2 443 45174 Application Data 9960 2018-10-04 14:39:56.654868 0.000222 172.19.22.66 172.19.1.202 209 TLSv1.2 443 45174 Application Data 9993 2018-10-04 14:39:56.681961 0.027093 172.19.22.66 172.19.1.202 520 TLSv1.2 443 45162 Application Data 9996 2018-10-04 14:39:56.682181 0.000220 172.19.22.66 172.19.1.202 1270 TLSv1.2 443 45162 Application Data 9997 2018-10-04 14:39:56.682191 0.000010 172.19.22.66 172.19.1.202 209 TLSv1.2 443 45162 Application Data 10009 2018-10-04 14:39:56.698411 0.016220 172.19.22.66 172.19.1.202 520 TLSv1.2 443 45166 Application Data 10010 2018-10-04 14:39:56.698421 0.000010 172.19.22.66 172.19.1.202 1272 TLSv1.2 443 45166 Application Data 10011 2018-10-04 14:39:56.698428 0.000007 172.19.22.66 172.19.1.202 209 TLSv1.2 443 45166 Application Data 10021 2018-10-04 14:39:56.712929 0.014501 172.19.22.66 172.19.1.202 520 TLSv1.2 443 45182 Application Data 10022 2018-10-04 14:39:56.712937 0.000008 172.19.22.66 172.19.1.202 1144 TLSv1.2 443 45182 Application Data 10023 2018-10-04 14:39:56.713030 0.000093 172.19.22.66 172.19.1.202 209 TLSv1.2 443 45182 Application Data 10024 2018-10-04 14:39:56.717274 0.004244 172.19.22.66 172.19.1.202 175 TCP 443 45182 https > 45182 [ACK] Seq=69231 Ack=15638 Win=21967 Len=0 TSV=1047939558 TSER=727588119 10026 2018-10-04 14:39:56.729085 0.011811 172.19.22 ... (more)

edit retag flag offensive close merge delete

Comments

Rather than posting a wall of text you could help us to help you by:

  • Isolating the actual packets of interest and then using the "code" formatting button to make them readable.
  • Post a link to the actual capture file so we can use our favourite tool, Wireshark, to analyze the content.
grahamb gravatar imagegrahamb ( 2018-10-04 10:39:53 +0000 )edit