This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

About the TCP connection state changes

Hi： Ask about the state of the TCP protocol changes：

After the client sends a SYN packet, received RST packet on the server side, connection status changes and subsequent behavior?
After the client sends a SYN packet, did not receive any packets,connection status changes and subsequent behavior?
After the client sends a SYN packet received from the server-side packet SYN flag bit is not set，connection status changes and subsequent behavior?
When the server-side in the SYN-RVCD state，received from the client-side packet RST flag bit is set，connection status changes and subsequent behavior?
When the server-side in the SYN-RVCD state，Has not received a follow-up packet，connection status changes and subsequent behavior?
When the server-side in the ESTABLISHED state，received from the client-side packet RST flag bit is set，connection status changes and subsequent behavior?
When the server-side in the CLOSE-WAIT state，received from the client-side packet RST flag bit is set，connection status changes and subsequent behavior?
When the server-side in the LAST-ACK state，received from the client-side packet RST flag bit is set，connection status changes and subsequent behavior?
When the client-side in the FIN-WAIT-1 state，received from the server-side packet RST flag bit is set，connection status changes and subsequent behavior?
When the client-side in the FIN-WAIT-2 state，received from the server-side packet RST flag bit is set，connection status changes and subsequent behavior?

Thanks

homework tcp

asked 28 Mar '13, 05:38

mengsunny
11●4●4●6
accept rate: 0%

edited 28 Mar '13, 05:45

grahamb ♦
19.8k●3●30●206

2 Answers:

I doubt anyone here is going to do that much work for you on an obvious homework assignment... you should install Wireshark and start testing connections to sites that work, sites that do not have ports open etc.

Find that stuff out yourself, and ask questions about specific findings that you do not understand, but don't expect to get your paper handed to you just by asking a quoted exercise instruction.

answered 28 Mar '13, 05:43

Jasper ♦♦
23.8k●5●51●284
accept rate: 18%

@Jasper, I guess we're getting old. Our generation tried to find out things for themselves. Then we had the generation that googled for stuff and now it seems we have a generation that asks other people to google for them ;-)

(28 Mar '13, 05:49) SYN-bit ♦♦

To accept criticism, to find the answer.

(28 Mar '13, 05:56) mengsunny

Well then, accept the feedback that you should find the answers yourself first ;-)

(28 Mar '13, 06:29) Jasper ♦♦

it seems we have a generation that asks other people to google for them ;-)

that usually makes me answer with a link to http://lmgtfy.com/ :-)

(28 Mar '13, 14:59) Kurt Knochner ♦

Is it just me, or are there no real questions?

Or, what is the meaning of the following?

connection status changes and subsequent behavior?

(28 Mar '13, 15:02) Kurt Knochner ♦

Presumably you're supposed to insert "what are the" before each of those items.

Hopefully mengsunny can drink from the firehose I pointed in their direction.

(28 Mar '13, 21:11) Guy Harris ♦♦

I'm guessing the original homework assignment is in a language other than English, and there is an attempt to translate it. The question I expect is "what happens to the connect state, and what is the subsequent behaviour of the communicating systems?" (or something like that ;-) )

(29 Mar '13, 00:01) martyvis

I am Chinese, English is not good, so the question expression unclear.

(29 Mar '13, 00:10) mengsunny

I verified through Wireshark： https://www.cloudshark.org/captures/b92be1030b66 https://www.cloudshark.org/captures/241ec4f26790 https://www.cloudshark.org/captures/2203c2607c52 https://www.cloudshark.org/captures/0326777c17db https://www.cloudshark.org/captures/92589f1a7f8c https://www.cloudshark.org/captures/b281558e99fa https://www.cloudshark.org/captures/2ac907f64b54

Currently, there is no way to simulate the closure of the TCP, so not yet verified.

(29 Mar '13, 00:21) mengsunny

Have you tried using Scapy to simulate these scenarios? You can script any traffic flow with scapy.

(29 Mar '13, 03:08) SYN-bit ♦♦

showing 5 of 10 show 5 more comments

0	See this. answered 28 Mar '13, 11:37 Guy Harris ♦♦ 17.4k●3●35●196 accept rate: 19%