Re: RST ACK

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



That does seem probable. One thing I just realized is that the server that
is functioning as the client in this instance, also has TCP socket
connections where is functions as the server. The only time I am seeing this
SYN-RST behavior is when is functions as the client. The other instance
works fine.

"Alexander Nickolov" wrote:

> This could be because the server listening socket's queue is full
> with unaccepted connections. Windows behaves improperly
> and returns a RST in this case. Mind you, this is just a guess...
>
> --
> =====================================
> Alexander Nickolov
> Microsoft MVP [VC], MCSD
> email: agnickolov@xxxxxxxx
> MVP VC FAQ: http://www.mvps.org/vcfaq
> =====================================
>
> "Mark Perschbacher" <MarkPerschbacher@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
> message news:40A3AD96-24E5-42E3-AA0E-63EF4D9ABBB8@xxxxxxxxxxxxxxxx
> > But shouldn't the server send a RST vs a RST ACK?
> >
> > "Arkady Frenkel" wrote:
> >
> >> RST mean that server decided to stop communication due to some reason
> >> Arkady
> >>
> >> "Mark Perschbacher" <MarkPerschbacher@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
> >> message news:32F2486E-D9D5-47FB-9585-A934C52E30BA@xxxxxxxxxxxxxxxx
> >> > Thanks that was helpful. So if our system as the client is sending a
> >> > SYN,
> >> > and the server side is sending back an RST ACK, could that mean that
> >> > their
> >> > side is percieveing our SYN as an RST? Here is the hexadecimal message
> >> > we
> >> > are sending
> >> > |||||||||||||534687993A||||||UE^3
> >> > 0x0000 00 06 B1 0C 7E 40 00 11-43 DD DA 13 08 00 45 00
> >> > ..±.~@..C??...E.
> >> > 0x0010 00 30 94 5B 40 00 80 06-00 00 D7 C8 00 5B 0A 01 .0"[@.?...ª?.[..
> >> > 0x0020 00 13 08 2C 46 A4 ED AE-61 E8 00 00 00 00 70 02
> >> > ...,F¤?®a?....p.
> >> > 0x0030 80 00 82 80 00 00 02 04-05 B4 01 01 04 02
> >> > ?.,?.....´....
> >> >
> >> > "Arkady Frenkel" wrote:
> >> >
> >> >> Look for rules on page 35 of http://www.faqs.org/rfcs/rfc793.html
> >> >> Arkady
> >> >>
> >> >> "Mark Perschbacher" <MarkPerschbacher@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote
> >> >> in
> >> >> message news:DCB3BB77-3EF5-4D5B-87E8-1A19581EFAA9@xxxxxxxxxxxxxxxx
> >> >> >I am trying to troubleshoot a TCP socket connection between two
> >> >> >Win200x
> >> >> > servers. I ran a sniffer, and the client in the connection is
> >> >> > sending
> >> >> > out
> >> >> > SYN requests, and the server side is sending back RST ACK.
> >> >> > Shouldn't
> >> >> > the
> >> >> > server be sending back either a SYN or an ACK, and is there a common
> >> >> > cause
> >> >> > for this?
> >> >>
> >> >>
> >> >>
> >>
> >>
> >>
>
>
>
.



Relevant Pages

  • Re: Network intermittently dropping the connection to shared files on server
    ... what we were using with our SBS2000 server with no problems. ... It's a small Server plus 4 Client W/S set up in one office. ... All users that have current connections to the shared files are ... We have a small network < 5 clients connected to a new Dell ...
    (microsoft.public.windows.server.sbs)
  • Re: weird scans from port 80
    ... > with a RST packet. ... > server which has clients with dynamic IP address. ... > How many open connections of this kind can the server ...
    (comp.os.linux.security)
  • Re: TCP server stop receiving new connections
    ... reset the event mask of your listening socket each time you ... I have a strange problem in my class library used by all our client ... server applications. ... incomming connections, but keeps current connections. ...
    (microsoft.public.win32.programmer.networks)
  • Re: RTC remoting > Explained in 11 minutes
    ... transport components for connections between clients and servers. ... server response but also server request (to client) -> client response) ... handed off to the different attached plugin command handlers which have ...
    (borland.public.delphi.thirdpartytools.general)
  • Re: Network intermittently dropping the connection to shared files on server
    ... ISA Server detected routes through adapter Loopback that do not correlate ... It's a small Server plus 4 Client W/S set up in one office. ... All users that have current connections to the shared files are ... We have a small network < 5 clients connected to a new Dell ...
    (microsoft.public.windows.server.sbs)