This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hi.

We are using Apache 2.4 and Keep Alive is set to On.

We have too many Fin_Wait_2.

Captured packets are like as following.

---begin of session---

p1. session open

p2. tls handshakes

p3. application data

p4. no packets during 5 seconds

p5. server's fin

p6. client's ack

p7. no packets during 19~79 seconds

p8. client's "Encrypted Alert" and TCP RESET(session close)

---end of session---

p7 is not shown when Keep-Alive is set to Off. (There is not any delay with keep-alive off.)

I need your idea about

  1. p7(state of FinWait2)?
  2. Client's delayed "Encrypted Alert"(p8)?

Thanks.

asked 15 Apr '17, 00:51

impask's gravatar image

impask
6112
accept rate: 0%

keep alive time-out is 5 seconds

(15 Apr '17, 00:59) impask
Be the first one to answer this question!
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×14
×11
×7
×1
×1

question asked: 15 Apr '17, 00:51

question was seen: 781 times

last updated: 15 Apr '17, 00:59

p​o​w​e​r​e​d by O​S​Q​A