This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Maybe easy question, but I dont know how. I need to trace who is killing connection between my PC and Oracle. I have IP address. After some time of using connection is closed and I need to know who/what does it, oracle or firewall? Or anything else? How do I trace it?

asked 10 Jun '15, 04:12

innspiron's gravatar image

innspiron
6113
accept rate: 0%


Best case, with a third PC capturing what the other two do. See the Wiki page for capture setup options.

If SPAN/TAP is not possible, trace on your PC, but that may give you incorrect results. When you have the packets, check connection by connection if there's anything out of the ordinary terminating it, e.g. TCP errors (filter for tcp.analysis.flags) or timeouts. Easier said than done, but if you can upload a capture to e.g. Cloudshark some of us can take a look (if it's not too many packets).

permanent link

answered 10 Jun '15, 04:16

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×41
×10
×3

question asked: 10 Jun '15, 04:12

question was seen: 1,496 times

last updated: 10 Jun '15, 04:16

p​o​w​e​r​e​d by O​S​Q​A