Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

Strange Tcp RST flow

Dear all This is not Wireshark problem but hope i can have professional advice about this Strange Tcp RST.

Normal, when recevied un-wanted packet from other sides, device should send TCP RST to other side. But in my case, i see modem sometimes send RST even if not received anything from other sides.

Does anybody knows why modem send Tcp RST packet in this case ? Many thank for your help.

2021-10-28 10:24:23.870773  19.252.11.19    60.192.202.127  TCP 172 37198 → 9000 [PSH, ACK] Seq=1161 Ack=3357 Win=135 Len=98 TSval=1503019263 TSecr=382793032

2021-10-28 10:24:24.115796  60.192.202.127  19.252.11.19    TCP 74  9000 → 37198 [ACK] Seq=3357 Ack=1259 Win=61 Len=0 TSval=382793571 TSecr=1503019263

2021-10-28 10:24:29.527818  19.252.11.19    60.192.202.127  TCP 175 37198 → 9000 [PSH, ACK] Seq=1259 Ack=3357 Win=135 Len=101 TSval=1503020263 TSecr=382793571

2021-10-28 10:24:29.772551  60.192.202.127  19.252.11.19    TCP 74  9000 → 37198 [ACK] Seq=3357 Ack=1360 Win=61 Len=0 TSval=382799228 TSecr=1503020263

2021-10-28 10:24:29.772795  60.192.202.127  19.252.11.19    TCP 150 9000 → 37198 [PSH, ACK] Seq=3357 Ack=1360 Win=61 Len=76 TSval=382799228 TSecr=1503020263

2021-10-28 10:24:29.775763  19.252.11.19    60.192.202.127  TCP 74  37198 → 9000 [ACK] Seq=1360 Ack=3433 Win=135 Len=0 TSval=1503020512 TSecr=382799228

2021-10-28 10:24:34.541725  19.252.11.19    60.192.202.127  TCP 74  37198 → 9000 [RST, ACK] Seq=1360 Ack=3433 Win=135 Len=0 TSval=1503025264 TSecr=382799228

Strange Tcp RST flow

Dear all This is not Wireshark problem but hope i can have professional advice about this Strange Tcp RST.

Normal, when recevied un-wanted packet from other sides, device should send TCP RST to other side. But in my case, i see the modem sometimes send RST even if not received anything from other sides.

Does anybody knows why modem send Tcp RST packet in this case ? Many thank for your help.

2021-10-28 10:24:23.870773  19.252.11.19    60.192.202.127  TCP 172 37198 → 9000 [PSH, ACK] Seq=1161 Ack=3357 Win=135 Len=98 TSval=1503019263 TSecr=382793032

2021-10-28 10:24:24.115796  60.192.202.127  19.252.11.19    TCP 74  9000 → 37198 [ACK] Seq=3357 Ack=1259 Win=61 Len=0 TSval=382793571 TSecr=1503019263

2021-10-28 10:24:29.527818  19.252.11.19    60.192.202.127  TCP 175 37198 → 9000 [PSH, ACK] Seq=1259 Ack=3357 Win=135 Len=101 TSval=1503020263 TSecr=382793571

2021-10-28 10:24:29.772551  60.192.202.127  19.252.11.19    TCP 74  9000 → 37198 [ACK] Seq=3357 Ack=1360 Win=61 Len=0 TSval=382799228 TSecr=1503020263

2021-10-28 10:24:29.772795  60.192.202.127  19.252.11.19    TCP 150 9000 → 37198 [PSH, ACK] Seq=3357 Ack=1360 Win=61 Len=76 TSval=382799228 TSecr=1503020263

2021-10-28 10:24:29.775763  19.252.11.19    60.192.202.127  TCP 74  37198 → 9000 [ACK] Seq=1360 Ack=3433 Win=135 Len=0 TSval=1503020512 TSecr=382799228

2021-10-28 10:24:34.541725  19.252.11.19    60.192.202.127  TCP 74  37198 → 9000 [RST, ACK] Seq=1360 Ack=3433 Win=135 Len=0 TSval=1503025264 TSecr=382799228