Hi all, newbie here so sorry in advance.
I have a Java server serving Android devices via TCP sockets. All seems well enough until at some uncertain point all attempts to open a new TCP socket to the server fail on timeout.
I have a .pcapng capture I recorded using WireShark, but all my attempts to investigate what it implies have been for naught. I will appreciate any insight you can give me, even if it's just a piece of the puzzle.
The link to the .pcapng file: here
Edit: So sorry I meant to write this and forgot: please filter by tcp.port==8888
The server ip is: 188.8.131.52
asked 04 Nov '15, 13:55
edited 04 Nov '15, 14:21
Well as you can see at the picture:
answered 04 Nov '15, 14:41
edited 04 Nov '15, 14:43
O.K. I repeat my advice ;-))
Please take a look at the pcap file tcp_retrans.pcapng and apply the following filter.
You will see, that ALL connections (from the internet and the local network) to 10.0.0.1 are being 'dropped' (SYN resend). There are some TCP RESETs for port 80 and 443, but not for any other port.
I see the following possible reasons for that behavior. Most likeley reason at the top!
Please disable the Windows Firewall for a test or any other security software installed on 10.0.0.1 (like AV, VPN client, Endpoint Security, etc.). Most likely the problem will then be gone.
answered 06 Nov '15, 09:30
Kurt Knochner ♦