This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

what is the state of TCP when it re-transmit packets after sending FIN

0

alt text

From THE NO.282 packet, we see that the TCP has sent a FIN, so the TCP is in FIN_WAIT_1 state. Since it receives multiple ACK to inform it to retrasmit, it begins to retransmit. So what is the state of TCP?

asked 28 Oct '15, 10:23

kitty's gravatar image

kitty
6●2●2●4
accept rate: 0%

One Answer:

0

10.0.0.1is in FIN_WAIT_1
10.0.0.10 is in ESTABLISHED until it ACKs the FIN

answered 28 Oct '15, 10:48

Christian_R's gravatar image

Christian_R
1.8k●2●6●25
accept rate: 16%

@Christian_R the NO.535 packet is a data packet from 10.0.0.1. If 10.0.0.1 is in FIN_WAIT_1, it can still send packets?

(28 Oct '15, 10:52) kitty

Yes it still can serve TCP retrans requests of the other side.

(28 Oct '15, 10:57) Christian_R

That is one reason why RST is used more often today.

(28 Oct '15, 10:58) Christian_R