Is this normal behaviour? asked 05 Apr '17, 07:18 Vincebaat |
2 Answers:
Looks pretty normal to me - some clients or servers terminate connections with a reset packet, because it's faster and needs less resources than the "normal" FIN-ACK teardown. So unless the reset appears before all the data is exchanged, it's nothing to worry about. answered 05 Apr '17, 07:20 Jasper ♦♦ |
Your capture looks very normal to me. Just to add up - It's probably something you don't want to hear - but whenever possible, do baselines !
I often have co-workers asking : '' Hey, is that normal I have this in Wireshark for X specific thing '', and I'm unable to tell them if it's normal or not because it's something too specific I never see / no baseline. answered 05 Apr '17, 11:00 jerioux |