This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Why am I sending a [RST, ACK] packet?

0

So I've been developing client/server software (for an MMORPG).

Sometimes, randomly it would seem, users get disconnected from the server for no reason...

We finally managed to capture this incident using WireShark...

It would seem the client is sending a [RST, ACK] packet to the server.

Why could this be happening? The dedicated computer hosting the server has a firewall on, but it is set to allow connections from the port that the client connects to... On top of that the clients ARE able to connect, they just disconnect sometimes...

Here's a picture of the packet in question, http://puu.sh/kXkEe/3607a35510.jpg

It has the same Ack# as the previous packet, so here's a picture of that one too... http://puu.sh/kXkMk/e2d7911022.jpg

asked 25 Oct '15, 12:37

Ricky%20Rodrigues's gravatar image

Ricky Rodrigues
1112
accept rate: 0%

edited 25 Oct '15, 12:55

I think it is the same picture.

(25 Oct '15, 12:43) Christian_R

Sorry here is the other SS... http://puu.sh/kXkMk/e2d7911022.jpg

(25 Oct '15, 12:54) Ricky Rodrigues

Could you provide us a trace on public accessible place (e.g. cloudshark.com)?

(25 Oct '15, 15:02) Christian_R

2 Answers:

0

Not so easy to tell with just this screenshot. But the session looks quite calm until this RST shows up. If I were you I would look deeper at the 192.168.0.2 side, and look what the app log is telling you. Because, in this case it seems to me that the most probably reasons for this RST is an app related problem at the 192.168.0.2 side.

answered 25 Oct '15, 12:51

Christian_R's gravatar image

Christian_R
1.8k2625
accept rate: 16%

edited 25 Oct '15, 12:54

0

I am not an expert with wireshark but looking at the pics the client side window value is always low and there are no window updates being pushed through so this could be a good place to look also.

answered 26 Oct '15, 02:11

m0rph's gravatar image

m0rph
16223
accept rate: 0%