This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

[FIN, ACK] -> [ACK] -> [RST, ACK]

0

alt text

Server is 172..50 and client is 130...5. Clients gets 10060 "A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond." From wireshark trace, I see 8 packets of [FIN, ACK] then [ACK] then again [RST, ACK]. What does this mean? The same pattern is observed on client side. Thank you for your help!

asked 07 Sep '16, 09:57

gyuunyuu's gravatar image

gyuunyuu
6113
accept rate: 0%

edited 07 Sep '16, 10:00


One Answer:

0

Your TCP connection is shutdown. The reason why is in the application, your network traffic nor Wireshark will tell you that.

answered 07 Sep '16, 10:10

Jaap's gravatar image

Jaap ♦
11.7k16101
accept rate: 14%

Hi Jaap, Thanks for the reply. Are you saying it's normal to have [RST, ACK] for every FIN packet?

(07 Sep '16, 10:51) gyuunyuu