This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

TCP DupACKs

0

hi there

i have a client keeps sending a lot of [FIN, ACK] after sending ''TCP DupACKs'' to the server.

what could be the reason.

This question is marked "community wiki".

asked 10 May '14, 02:52

Safwan%20Khairi%20Hallfawi's gravatar image

Safwan Khair...
1111
accept rate: 0%

wikified 10 May '14, 02:53


One Answer:

0

It is not unusual to see those in a packet capture: - sending DupACKs means the TCP stack has seen inbound packets arriving out of order - sending a FIN,ACK means the local socket application has issued a close() call, terminating the tcp connection in an orderly fashion

Both scenarios are very common and not necessarily indicative af a problem.

Could you share the capture at http://cloudshark.org so we can give a more precise explanation

answered 10 May '14, 12:52

mrEEde's gravatar image

mrEEde
3.9k152270
accept rate: 20%