Hi, I am having an intermittent issue where sometimes an HTTP POST to my proxy server results in a 405, Invalid Method response. After capturing both a successful and unsuccessful POST I have noted the following. Both captures start with a normal 3-way handshake. After this they diverge. The successful one is as follows:
The stream which results in the 405 has these same three frames with the sequence order reversed. i.e:
So it would seem to me that the TCP segments are being passed down out of order. Am I interpreting this correctly? It seems suspicious that there are two segments of exactly the same size (1380) with an ACK flag which are followed by the a second segment with a PSH flag. Each pair is correct, but the order of the pairs is wrong. Why would this be happening? asked 27 Oct '15, 21:42 Jeremy Hagan |
Could You provide us a trace on a public accessible place?