Wednesday, October 20, 2021

TCP RST Instead of Final FIN ACK

I'm looking for advice on a packet capture. Our service sends two RST packets instead of the final FIN ACK. Is this common?

Also, why would there be a TLS encrypted alert packet between the ACK and the FIN ACK from the client? Is this considered a half open connection at that point, before the client has sent the FIN ACK?

I'm not used to troubleshooting TCP connections at this level, so any help would be appreciated.



No comments:

Post a Comment