Have you guys seen anything like this capture: Client: SYN, SYN (retrans), SYN (retrans)...about 12 seconds total flow...and then the SERVER replies with a TCP reset?

Happens with multiple, unrelated servers and web sites. Server always sends the reset.

I'll stand up a web server tomorrow to get a capture from that side, but wanted to ask this question here now so that I can be more prepared for a customer tomorrow morning.

edit: if the title isn't clear, there is only the syn, retransmissions, and then the reset in the flow; no other packets