This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Many RST from the Client Machine

0

Hello, Maybe you can help me figure this out.We're having time out issues with a web application. The client machine is IP Address: 192.168.108.142 and the Host Web Server IP Address is 193.246.224.116. I ran wireshark from the client machine. Can someone help me understand what is going on here? Thanks. link text

asked 18 Oct '12, 17:16

TechQueen's gravatar image

TechQueen
1111
accept rate: 0%

1

Technicolor! :) I would say that you're client PCs are using MS IE browser and it's tearing down SSL sessions via RST. This is normal for IE browsers. The Encrypted Alert is telling that SSL is closing it's connection, and IE follows up by tearing down the TCP connections with RSTs. Is this trace when the timeout is happening? I don't think you'll be able to debug this because it's encrypted. You're going to have to use HTTP Analyzer or equivalent to figure out what the server is sending you. SSL timeout, and other things can come into play, but you'll need to debug at the http layer.

(18 Oct '12, 18:06) hansangb