Wireshark-users: [Wireshark-users] RSK ACK
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: "LaVallee, Craig (GE Healthcare)" <Craig.LaVallee@xxxxxx>
Date: Fri, 19 Sep 2008 13:12:11 -0400
Who is causing the reset?
 
No.     Time        Source                Destination           Protocol Info
     16 79869.709088 172.27.1.5            10.119.31.11          TCP      9100 > 4783 [RST, ACK] Seq=1957090304 Ack=1 Win=0 Len=0
 
Frame 16 (60 bytes on wire, 60 bytes captured)
    Arrival Time: Aug 21, 2008 07:55:01.569243000
    [Time delta from previous packet: 0.001198000 seconds]
    [Time since reference or first frame: 79869.709088000 seconds]
    Frame Number: 16
    Packet Length: 60 bytes
    Capture Length: 60 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:tcp]
    [Coloring Rule Name: TCP RST]
    [Coloring Rule String: tcp.flags.reset eq 1]
Ethernet II, Src: Intel_bc:27:a5 (00:04:23:bc:27:a5), Dst: Cisco_8e:23:02 (00:06:d7:8e:23:02)
    Destination: Cisco_8e:23:02 (00:06:d7:8e:23:02)
    Source: Intel_bc:27:a5 (00:04:23:bc:27:a5)
    Type: IP (0x0800)
    Trailer: 000000000000
Internet Protocol, Src: 172.27.1.5 (172.27.1.5), Dst: 10.119.31.11 (10.119.31.11)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
    Total Length: 40
    Identification: 0x47c1 (18369)
    Flags: 0x00
    Fragment offset: 0
    Time to live: 57
    Protocol: TCP (0x06)
    Header checksum: 0x636d [correct]
    Source: 172.27.1.5 (172.27.1.5)
    Destination: 10.119.31.11 (10.119.31.11)
Transmission Control Protocol, Src Port: 9100 (9100), Dst Port: 4783 (4783), Seq: 1957090304, Ack: 1, Len: 0
    Source port: 9100 (9100)
    Destination port: 4783 (4783)
    Sequence number: 1957090304    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 20 bytes
    Flags: 0x14 (RST, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .1.. = Reset: Set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 0
    Checksum: 0xf098 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 15]
        [The RTT to ACK the segment was: 0.001198000 seconds]