This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

EOF while receiving data from socket.

0

I found that in a TCP connection the java captured EOF exception(0 returned while reading or receiving) while receiving data from remote server and closed the connection, but from the tcpdump, the local side had been receiving data, I don't understand why the application would receive a EOF error.

This often happens when the peer was receiving data at extremely slow rate, but this doesn't look like the case.

I appreciate any comments on it, Thanks.

  14724 16:03:19.427810 122.11.56.106         10.198.242.132        TCP      [TCP segment of a reassembled PDU]
  14726 16:03:19.430709 122.11.56.106         10.198.242.132        TCP      [TCP segment of a reassembled PDU]
  14728 16:03:19.434005 122.11.56.106         10.198.242.132        TCP      [TCP segment of a reassembled PDU]
  14731 16:03:19.437118 122.11.56.106         10.198.242.132        TCP      [TCP segment of a reassembled PDU]
  14733 16:03:19.439956 122.11.56.106         10.198.242.132        TCP      [TCP segment of a reassembled PDU]
   Transmission Control Protocol, Src Port: 80 (80), Dst Port: 44380 (44380), Seq: 4415905, Ack: 305, Len: 1368
  14734 16:03:19.504241 10.198.242.132        122.11.56.106         TCP      44380 > 80 [ACK] Seq=305 Ack=4417274 Win=279976 Len=0 TSV=24975 TSER=1978478379
  14737 16:03:19.580306 10.198.242.132        122.11.56.106         TCP      44380 > 80 [FIN, ACK] Seq=305 Ack=4417274 Win=290016 Len=0 TSV=24982 TSER=1978478379
  14740 16:03:19.723586 122.11.56.106         10.198.242.132        TCP      80 > 44380 [ACK] Seq=4417274 Ack=306 Win=6912 Len=0 TSV=1978478437 TSER=24982

asked 24 Nov '11, 00:09

Crs's gravatar image

Crs
1335
accept rate: 0%

Which host was running the program that received the EOF error? 122.11.56.106 or 10.198.242.132?

(24 Nov '11, 01:27) Guy Harris ♦♦

Hi Harris,

10.198.242.132 was receiving data, EOS returned and then it closed the connection.

14737 16:03:19.580306 10.198.242.132 122.11.56.106 TCP 44380 > 80 [FIN, ACK] Seq=305 Ack=4417274 Win=290016 Len=0 TSV=24982 TSER=1978478379

(25 Nov '11, 03:13) Crs