Hello, there is a error 201 with adobe creative cloud that we keep getting at my company. It is a small install file that connects to an adobe server and tries to download the main files. I will attach a screenshot so you can see what is happening while it tries to download the file. I also selected the line that I feel may be related to the issue. Please keep in mind that our network firewall should be open to everything that is reasonable. asked 07 Nov '16, 07:10  flentini |
This is a static archive of our old Q&A Site.
Please post any new questions and answers at ask.wireshark.org.
Making assessments from a screen shot is difficult, so this may be off, but the TCP resets suggest that the firewall or proxy is trying to stop this from happening.
Am I correct in my assumption that for the rcp recets under the info column that it is saying that port 80 on adobes end is trying to communicate back to us on port 129x?
Frames 606 and 608 belong to one TCP session (client:1291 -> server:80), frame 607 belongs to another one (client:1292 -> server:80).
A RST packet just says that its sender terminates an existing TCP session in emergency mode. It is not an attempt to establish a new one nor to modify the existing one and continue it.
Thanks sindy that was usefull information. Could anyone tell me what frame 613 means? I am learning as I go here.
Frame 613 is most likely an ACK packet which has no payload in it but the ACK sequence number matches the one already sent in frame 612 (that's the meaning of
612 #1), which is quite a weird behaviour of the server (or firewall, or load balancer, ... which tamper with the TCP session as it passes through them).But that's really at the limit of screenshot "analysis", so I'd recommend you to follow @Jaap's soft hint and publish the capture file if you intend to continue asking.
To publish a capture file, you have to upload it to Cloudshark or to any plain file sharing service (Dropbox, Goggle Drive, ...) and edit your Question with a login-free link to it.