This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Analysis of TCP Termination process

0

From the WS capture link below, can anyone tell me why I am getting server retransmission packets from this simple connect/disconnect TCP sequence from my email server? Am I missing an ACK somewhere? I've tried several different extra ACKs, but nothing has worked. Extra ACKs seems to produce 'Duplicate ACK' packets. This is from my own TCP/IP stack.

Thanks.

Sutton

https://www.cloudshark.org/captures/1e8542d7b55c

asked 07 Mar '17, 06:32

dodge55's gravatar image

dodge55
21449
accept rate: 0%

edited 07 Mar '17, 06:50

grahamb's gravatar image

grahamb ♦
19.8k330206


One Answer:

1

I figured it out. I wasn't adding 1 to the sequence number for the server's FIN packet. So, the seq. number was wrong.

answered 07 Mar '17, 06:48

dodge55's gravatar image

dodge55
21449
accept rate: 0%