This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hi,

Why would you normally see RST, ACK packets apparently in the middle of a transaction?

https://www.cloudshark.org/captures/3b405a6ad37b

Thanks

asked 22 Apr '13, 07:08

Mikecl's gravatar image

Mikecl
11113
accept rate: 0%

edited 22 Apr '13, 07:26

the link to cloudshark.org does not work.

UPDATE: I fixed the link

(22 Apr '13, 07:12) Kurt Knochner ♦

The RESET (Frame #699) of the client is an answer to the FIN of the server (Frame #697). The whole communication is a SSL/TLS session via port 8080 and apparently windows clients do close a SSL connection with a RESET instead of answering the FIN. See also this question:

http://ask.wireshark.org/questions/5533/rst-ack-immediately-after-sending-data

Based on the TTL and the window size of the SYN packet, I believe your client is a Windows XP system. I just (re-) verified that behavior with a Windows XP system and IE.

So, that's nothing to worry about, as you cannot change it anyways ;-))

Regards
Kurt

permanent link

answered 22 Apr '13, 07:23

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%

edited 22 Apr '13, 07:26

Thanks Kurt,

Not quite clear what you mean, the Application People say that the Client sending the RESET is causing a problem, on the actual client as far as we know we are not closing the connection. This happens to multiple clients. Should I be able to see something different with Windows7

(22 Apr '13, 07:33) Mikecl

Not quite clear what you mean,

I mean, that there is nothing to do for you, as that's default behavior of some windows clients.

the Application People say that the Client sending the RESET is causing a problem,

What kind of problem?

Should I be able to see something different with Windows7

maybe. I did not check.

(22 Apr '13, 12:31) Kurt Knochner ♦
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×1,620
×752
×139
×27
×7

question asked: 22 Apr '13, 07:08

question was seen: 15,979 times

last updated: 22 Apr '13, 12:31

p​o​w​e​r​e​d by O​S​Q​A