Client PC connects to a license server and checks in every 10 mins. Randomly the connection is "reset" where the user has to re-launch application again. Wireshark pcap show the connection using port 992 for SSL and port 1025 to check into license server. The last entry on the pcap show a [RST] just as connection to server is lost. Attached is pic of pcap if anybody has any ideas....thanks in advance.
asked 12 Apr '17, 14:38  jrafter edited 13 Apr '17, 12:45 |
This is a static archive of our old Q&A Site.
Please post any new questions and answers at ask.wireshark.org.
Thanks for getting to me...unfortunately I can't upload the whole pcap. I have attached the trace in chronological order for your viewing. Let me know if this helps. The pc checks into the license server on port 1025 every 10 mins. So far we only have had this happen at 3 locations(we have 25 locations,MPLS).Yes there is NAT being performed but this only started to happen recently to users
Somehow your picture does not fit to your problem description. The server port in the screen shot is 49411 not 992 ! Also you only show uni-directional traffic and the packets listed are not in chronological order - making it even more difficult to understand what is going on. . It'll be hard to give you any advice based on the information you provide. Can you share the original pcap file filtered on the session ?
regards Matthias
Are the license connections mostly idle? If so, are there any middleboxes (NAT, proxy, etc) between the client and the license server that would reject a timed-out session?