Does anyone know why a Server (10.161.96.228) sends two TCP RST after a successfull termination of the session with FIN/ACK from both the Server and the Client (10.90.32.180?
Is this normal, as i see it also in other sessions (X11, etc.)
asked 26 Sep '17, 04:23
I would say there's nothing to worry about, unless there should have been more data - but since both sides already said goodbye via FIN the RSTs won't do no harm. It's hard to say where they come from, but maybe a device between the endpoints created them, e.g. a Firewall. This could be checked by looking at the TTL - if it's the same for the RSTs as for the normal packets from the IP it's the endpoint doing this.
answered 26 Sep '17, 04:49