Wireshark-users: [Wireshark-users] Odd tcp establishment sequence?
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Mohamed Lrhazi <lrhazi@xxxxxxxxx>
Date: Tue, 01 May 2018 17:30:33 +0000
Hello,

am trying to debug why often times, my ssh client timeout trying to establish connection to an ssh server (F5 device)... 

Often times, I see a SYN sent twice, then server responding with an ACK, then an SYN/ACK, then my client sends RST.

Other times, I see several SYN re-transmits, then ACK response, then SYN/ACK, then ACK from client and connection getting established!

This is all not very normal, right? especially the ACK in response to a SYN? that should cause clients to fail to continue establishing a connection, right?

Thanks a lot for your input, I know this is not wireshark issue!

Mohamed,

Attachment: f5-aom-odd-tcp-connection.PNG
Description: PNG image

Attachment: f5-aom-failed-tcp-connection.PNG
Description: PNG image