Ask Your Question

Revision history [back]

TCP session ended early - missing client ACK?

image description

pcap file

I'm troubleshooting a connection between a client PC and an HTTP server. In this example, the client is requesting a file and only receives a few KB before the connection is reset.

The server sends four packets, then the client ACKs the first packet only, which appears to trigger the server to retransmit the un-ACKed packets. After several retransmissions the connection times out.

There is an IPsec tunnel between the client and the server. Any thoughts on this behaviour?

TCP session ended early - missing client ACK?

image description

pcap file

I'm troubleshooting a connection between a client PC and an HTTP server. In this example, the client is requesting a file and only receives a few KB before the connection is reset.

The server sends four packets, then the client ACKs the first packet only, which appears to trigger the server to retransmit the un-ACKed packets. After several retransmissions the connection times out.

There is an IPsec tunnel between the client and the server. Any thoughts on this behaviour?

Edits:

There is a site-to-site IPsec tunnel between the client (192.168.120.105) and server (10.21.8.54). The captures were taken from the client (Win10).

extended pcap