This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

who is killing connection

0

Maybe easy question, but I dont know how. I need to trace who is killing connection between my PC and Oracle. I have IP address. After some time of using connection is closed and I need to know who/what does it, oracle or firewall? Or anything else? How do I trace it?

asked 10 Jun '15, 04:12

innspiron's gravatar image

innspiron
6113
accept rate: 0%


One Answer:

1

Best case, with a third PC capturing what the other two do. See the Wiki page for capture setup options.

If SPAN/TAP is not possible, trace on your PC, but that may give you incorrect results. When you have the packets, check connection by connection if there's anything out of the ordinary terminating it, e.g. TCP errors (filter for tcp.analysis.flags) or timeouts. Easier said than done, but if you can upload a capture to e.g. Cloudshark some of us can take a look (if it's not too many packets).

answered 10 Jun '15, 04:16

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%