This is our old Q&A Site. Please post any new questions and answers at

While doing a file transfer using secure file transfer protocol, I am seeing the behaviour as given in the below image.

wireshark output

Instead accepting packets from server, it simply sends a RST. Found a similar case.

But wasn't helpful Please help.

Regards, Joemon

asked 08 Jun '17, 09:30

user_shark's gravatar image

accept rate: 0%

Hi Christian, Please find the trace at the below link

(08 Jun '17, 22:14) user_shark

What exactly is your problem? That RST itsself is not really bad at that moement. Some systems send an RST to avoid TIME_WAIT2. But it also can be sent due to the Encrypted alert.

If you have problems with unfinished file transfers, encrypted alert seems to be your problem. Some other side findings can be seen in your trace... Duplicate IP and Spanning Tree Topology Changes.

(09 Jun '17, 14:15) Christian_R

Yes Christian, the problem is with unfinished file transfer. Also can you explain on how is this encrypted alert different from the previous alerts. As you can see for the same connection, the client has accepted many such encrypted alerts sent previously by the server.

(11 Jun '17, 21:27) user_shark

Hi Christian,

Please ignore the previous captures. Kind of getting a different traces now and the same issue. Please find below the capture from client and server side.

Its showing unreassembled packet [incorrect tcp checksum] Even though I was able to get rid of this error by disabling tcp checksum offloading, still the issue remains.

(12 Jun '17, 06:49) user_shark
Be the first one to answer this question!
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here



Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text]( "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:


question asked: 08 Jun '17, 09:30

question was seen: 1,795 times

last updated: 12 Jun '17, 06:50

p​o​w​e​r​e​d by O​S​Q​A