Networking Forums
Home Register Members Search Links
Member Login:

Networking Forums > Computer Networking > Linux Networking > TCP connection reset issue

Reply
Thread Tools Display Modes

TCP connection reset issue

 
 
rjfleck@gmail.com
Guest
Posts: n/a

 
      12-04-2006, 07:00 PM
Hello

I am trying to resolve connection issues between a
Linux box running Suse 10.0 2.6.16.21-0.25-default

and a windows 2000 machine using VNC
and the same Linux box and an Irix machine with an ssh -X session.

below are the last parts of ethereal capture sessions which
share the same pattern.

The Linux box begins begins a set of TCP Retransmissions
with what seems to be the appropriate delays.
Then sends out an ARP request. Gets an answer back.
Sends out a another TCP Retransmission.
Both the Windows and Irix machines respond with a reset RST.
The VNC viewer or X session close out generating
connection reset by peer message.

There are no firewalls involved. Other Linux boxes in
the same group exhibit the same behavior.
There are no problems with the Irix box staying connected to the
Windows box and Windows box staying connected to the Irix box.

Any ideas? Tips? Tricks? Settings to massage?

Thanks in advance
Rich



No., Time, Source, Destination, Protocol, Info

17089, 1047.417807, 10.xxx.xxx.xx, 10.xxx.xxx.yy, TCP, 47685 > 5900
[PSH, ACK] Seq=50510 Ack=5378391 Win=32444 Len=10 TSV=19794218
TSER=12853209
17090, 1047.420693, 10.xxx.xxx.xx, 10.xxx.xxx.yy, TCP, 47685 > 5900
[PSH, ACK] Seq=50520 Ack=5378391 Win=32444 Len=6 TSV=19794218
TSER=12853209
17091, 1047.420929, 10.xxx.xxx.yy, 10.xxx.xxx.xx, TCP, 5900 > 47685
[ACK] Seq=5378391 Ack=50526 Win=64721 Len=0 TSV=12853209 TSER=19794218
17092, 1047.429041, 10.xxx.xxx.xx, 10.xxx.xxx.yy, TCP, 47685 > 5900
[PSH, ACK] Seq=50526 Ack=5378391 Win=32444 Len=6 TSV=19794221
TSER=12853209
17093, 1047.544950, 10.xxx.xxx.xx, 10.xxx.xxx.yy, TCP, 47685 > 5900
[PSH, ACK] Seq=50532 Ack=5378391 Win=32444 Len=10 TSV=19794250
TSER=12853209
17094, 1047.545192, 10.xxx.xxx.yy, 10.xxx.xxx.xx, TCP, 5900 > 47685
[ACK] Seq=5378391 Ack=50542 Win=64705 Len=0 TSV=12853210 TSER=19794221
17095, 1049.167048, 10.xxx.xxx.yy, Broadcast, ARP, Who has
10.xxx.xxx.zz? Tell 10.xxx.xxx.yy
17096, 1053.167105, 10.xxx.xxx.yy, Broadcast, ARP, Who has
10.xxx.xxx.zz? Tell 10.xxx.xxx.yy
17097, 1055.548936, 10.xxx.xxx.xx, 10.xxx.xxx.yy, TCP, 47685 > 5900
[PSH, ACK] Seq=50542 Ack=5378391 Win=32444 Len=10 TSV=19796251
TSER=12853210
17098, 1055.729563, 10.xxx.xxx.yy, 10.xxx.xxx.xx, TCP, 5900 > 47685
[ACK] Seq=5378391 Ack=50552 Win=64695 Len=0 TSV=12853292 TSER=19796251
17099, 1063.552880, 10.xxx.xxx.xx, 10.xxx.xxx.yy, TCP, 47685 > 5900
[PSH, ACK] Seq=50552 Ack=5378391 Win=32444 Len=10 TSV=19798252
TSER=12853292
17100, 1063.714109, 10.xxx.xxx.yy, 10.xxx.xxx.xx, TCP, 5900 > 47685
[ACK] Seq=5378391 Ack=50562 Win=64685 Len=0 TSV=12853372 TSER=19798252
17101, 1071.556933, 10.xxx.xxx.xx, 10.xxx.xxx.yy, TCP, 47685 > 5900
[PSH, ACK] Seq=50562 Ack=5378391 Win=32444 Len=10 TSV=19800253
TSER=12853372
17102, 1071.928836, 10.xxx.xxx.xx, 10.xxx.xxx.yy, TCP, [TCP
Retransmission] 47685 > 5900 [PSH, ACK] Seq=50562 Ack=5378391 Win=32444
Len=10 TSV=19800346 TSER=12853372
17103, 1072.672836, 10.xxx.xxx.xx, 10.xxx.xxx.yy, TCP, [TCP
Retransmission] 47685 > 5900 [PSH, ACK] Seq=50562 Ack=5378391 Win=32444
Len=10 TSV=19800532 TSER=12853372
17104, 1074.160837, 10.xxx.xxx.xx, 10.xxx.xxx.yy, TCP, [TCP
Retransmission] 47685 > 5900 [PSH, ACK] Seq=50562 Ack=5378391 Win=32444
Len=10 TSV=19800904 TSER=12853372
17105, 1077.136846, 10.xxx.xxx.xx, 10.xxx.xxx.yy, TCP, [TCP
Retransmission] 47685 > 5900 [PSH, ACK] Seq=50562 Ack=5378391 Win=32444
Len=10 TSV=19801648 TSER=12853372
17106, 1083.088842, 10.xxx.xxx.xx, 10.xxx.xxx.yy, TCP, [TCP
Retransmission] 47685 > 5900 [PSH, ACK] Seq=50562 Ack=5378391 Win=32444
Len=10 TSV=19803136 TSER=12853372
17107, 1088.088830, 10.xxx.xxx.xx, 10.xxx.xxx.yy, ARP, Who has
10.xxx.xxx.yy? Tell 10.xxx.xxx.xx
17108, 1088.088977, 10.xxx.xxx.yy, 10.xxx.xxx.xx, ARP, 10.xxx.xxx.yy is
at aa:aa:aa:aa:aa:aa
17109, 1094.992838, 10.xxx.xxx.xx, 10.xxx.xxx.yy, TCP, [TCP
Retransmission] 47685 > 5900 [PSH, ACK] Seq=50562 Ack=5378391 Win=32444
Len=10 TSV=19806112 TSER=12853372
17110, 1094.993157, 10.xxx.xxx.yy, 10.xxx.xxx.xx, TCP, 5900 > 47685
[RST] Seq=5378391 Ack=3517578924 Win=0 Len=0



No., Time, Source, Destination, Protocol, Info

10173, 1181.908519, 10.xxx.xxx.ww, 10.xxx.xxx.xx, X11, Requests:
ChangeGC, PolyFillRectangle
10174, 1181.908527, 10.xxx.xxx.xx, 10.xxx.xxx.ww, TCP, x-server >
cesdinv [ACK] Seq=143077 Ack=296289 Win=64076 Len=0
10175, 1182.548747, 10.xxx.xxx.ww, 10.xxx.xxx.xx, X11, Requests:
ChangeGC, PolyFillRectangle
10176, 1182.548754, 10.xxx.xxx.xx, 10.xxx.xxx.ww, TCP, x-server >
cesdinv [ACK] Seq=143077 Ack=296325 Win=64076 Len=0
10177, 1190.457622, 10.xxx.xxx.xx, 10.xxx.xxx.ww, X11, Event: KeyPress
10178, 1190.545568, 10.xxx.xxx.xx, 10.xxx.xxx.ww, X11, Event:
KeyRelease
10179, 1190.657949, 10.xxx.xxx.xx, 10.xxx.xxx.ww, X11, [TCP
Retransmission] Event: KeyPress, KeyRelease
10180, 1191.065955, 10.xxx.xxx.xx, 10.xxx.xxx.ww, X11, [TCP
Retransmission] Event: KeyPress, KeyRelease
10181, 1191.881958, 10.xxx.xxx.xx, 10.xxx.xxx.ww, X11, [TCP
Retransmission] Event: KeyPress, KeyRelease
10182, 1193.513948, 10.xxx.xxx.xx, 10.xxx.xxx.ww, X11, [TCP
Retransmission] Event: KeyPress, KeyRelease
10183, 1196.777952, 10.xxx.xxx.xx, 10.xxx.xxx.ww, X11, [TCP
Retransmission] Event: KeyPress, KeyRelease
10184, 1201.777943, 10.xxx.xxx.xx, 10.xxx.xxx.ww, ARP, Who has
10.xxx.xxx.ww? Tell 10.xxx.xxx.xx
10185, 1201.778397, 10.xxx.xxx.ww, 10.xxx.xxx.xx, ARP, 10.xxx.xxx.ww is
at aa:aa:aa:aa:aa:aa
10186, 1203.305950, 10.xxx.xxx.xx, 10.xxx.xxx.ww, X11, [TCP
Retransmission] Event: KeyPress, KeyRelease
10187, 1203.306227, 10.xxx.xxx.ww, 10.xxx.xxx.xx, TCP, cesdinv >
x-server [RST] Seq=296325 Ack=2562995737 Win=0 Len=0
10188, 1203.469415, 10.xxx.xxx.xx, 10.xxx.xxx.ww, X11, Event:
PropertyNotify
 
Reply With Quote
 
 
 
 
rjfleck@gmail.com
Guest
Posts: n/a

 
      12-13-2006, 09:21 PM
Hello

The issue has been resolved.
The IP addresses of the affected linux boxes were
also assigned to some SANs attached to a server.

The was discovered when we were able to ping
one of the linux boxes even though it was disconnected
from the network.

New IP addresses were assigned to the linux boxes
and the connections issues disappeared.

Thank You if spent some time thinking about this.

Rich

(E-Mail Removed) wrote:
> Hello
>
> I am trying to resolve connection issues between a
> Linux box running Suse 10.0 2.6.16.21-0.25-default
>
> and a windows 2000 machine using VNC
> and the same Linux box and an Irix machine with an ssh -X session.
>
> below are the last parts of ethereal capture sessions which
> share the same pattern.
>
> The Linux box begins begins a set of TCP Retransmissions
> with what seems to be the appropriate delays.
> Then sends out an ARP request. Gets an answer back.
> Sends out a another TCP Retransmission.
> Both the Windows and Irix machines respond with a reset RST.
> The VNC viewer or X session close out generating
> connection reset by peer message.
>
> There are no firewalls involved. Other Linux boxes in
> the same group exhibit the same behavior.
> There are no problems with the Irix box staying connected to the
> Windows box and Windows box staying connected to the Irix box.
>
> Any ideas? Tips? Tricks? Settings to massage?
>
> Thanks in advance
> Rich
>
>
>
> No., Time, Source, Destination, Protocol, Info
>
> 17089, 1047.417807, 10.xxx.xxx.xx, 10.xxx.xxx.yy, TCP, 47685 > 5900
> [PSH, ACK] Seq=50510 Ack=5378391 Win=32444 Len=10 TSV=19794218
> TSER=12853209
> 17090, 1047.420693, 10.xxx.xxx.xx, 10.xxx.xxx.yy, TCP, 47685 > 5900
> [PSH, ACK] Seq=50520 Ack=5378391 Win=32444 Len=6 TSV=19794218
> TSER=12853209
> 17091, 1047.420929, 10.xxx.xxx.yy, 10.xxx.xxx.xx, TCP, 5900 > 47685
> [ACK] Seq=5378391 Ack=50526 Win=64721 Len=0 TSV=12853209 TSER=19794218
> 17092, 1047.429041, 10.xxx.xxx.xx, 10.xxx.xxx.yy, TCP, 47685 > 5900
> [PSH, ACK] Seq=50526 Ack=5378391 Win=32444 Len=6 TSV=19794221
> TSER=12853209
> 17093, 1047.544950, 10.xxx.xxx.xx, 10.xxx.xxx.yy, TCP, 47685 > 5900
> [PSH, ACK] Seq=50532 Ack=5378391 Win=32444 Len=10 TSV=19794250
> TSER=12853209
> 17094, 1047.545192, 10.xxx.xxx.yy, 10.xxx.xxx.xx, TCP, 5900 > 47685
> [ACK] Seq=5378391 Ack=50542 Win=64705 Len=0 TSV=12853210 TSER=19794221
> 17095, 1049.167048, 10.xxx.xxx.yy, Broadcast, ARP, Who has
> 10.xxx.xxx.zz? Tell 10.xxx.xxx.yy
> 17096, 1053.167105, 10.xxx.xxx.yy, Broadcast, ARP, Who has
> 10.xxx.xxx.zz? Tell 10.xxx.xxx.yy
> 17097, 1055.548936, 10.xxx.xxx.xx, 10.xxx.xxx.yy, TCP, 47685 > 5900
> [PSH, ACK] Seq=50542 Ack=5378391 Win=32444 Len=10 TSV=19796251
> TSER=12853210
> 17098, 1055.729563, 10.xxx.xxx.yy, 10.xxx.xxx.xx, TCP, 5900 > 47685
> [ACK] Seq=5378391 Ack=50552 Win=64695 Len=0 TSV=12853292 TSER=19796251
> 17099, 1063.552880, 10.xxx.xxx.xx, 10.xxx.xxx.yy, TCP, 47685 > 5900
> [PSH, ACK] Seq=50552 Ack=5378391 Win=32444 Len=10 TSV=19798252
> TSER=12853292
> 17100, 1063.714109, 10.xxx.xxx.yy, 10.xxx.xxx.xx, TCP, 5900 > 47685
> [ACK] Seq=5378391 Ack=50562 Win=64685 Len=0 TSV=12853372 TSER=19798252
> 17101, 1071.556933, 10.xxx.xxx.xx, 10.xxx.xxx.yy, TCP, 47685 > 5900
> [PSH, ACK] Seq=50562 Ack=5378391 Win=32444 Len=10 TSV=19800253
> TSER=12853372
> 17102, 1071.928836, 10.xxx.xxx.xx, 10.xxx.xxx.yy, TCP, [TCP
> Retransmission] 47685 > 5900 [PSH, ACK] Seq=50562 Ack=5378391 Win=32444
> Len=10 TSV=19800346 TSER=12853372
> 17103, 1072.672836, 10.xxx.xxx.xx, 10.xxx.xxx.yy, TCP, [TCP
> Retransmission] 47685 > 5900 [PSH, ACK] Seq=50562 Ack=5378391 Win=32444
> Len=10 TSV=19800532 TSER=12853372
> 17104, 1074.160837, 10.xxx.xxx.xx, 10.xxx.xxx.yy, TCP, [TCP
> Retransmission] 47685 > 5900 [PSH, ACK] Seq=50562 Ack=5378391 Win=32444
> Len=10 TSV=19800904 TSER=12853372
> 17105, 1077.136846, 10.xxx.xxx.xx, 10.xxx.xxx.yy, TCP, [TCP
> Retransmission] 47685 > 5900 [PSH, ACK] Seq=50562 Ack=5378391 Win=32444
> Len=10 TSV=19801648 TSER=12853372
> 17106, 1083.088842, 10.xxx.xxx.xx, 10.xxx.xxx.yy, TCP, [TCP
> Retransmission] 47685 > 5900 [PSH, ACK] Seq=50562 Ack=5378391 Win=32444
> Len=10 TSV=19803136 TSER=12853372
> 17107, 1088.088830, 10.xxx.xxx.xx, 10.xxx.xxx.yy, ARP, Who has
> 10.xxx.xxx.yy? Tell 10.xxx.xxx.xx
> 17108, 1088.088977, 10.xxx.xxx.yy, 10.xxx.xxx.xx, ARP, 10.xxx.xxx.yy is
> at aa:aa:aa:aa:aa:aa
> 17109, 1094.992838, 10.xxx.xxx.xx, 10.xxx.xxx.yy, TCP, [TCP
> Retransmission] 47685 > 5900 [PSH, ACK] Seq=50562 Ack=5378391 Win=32444
> Len=10 TSV=19806112 TSER=12853372
> 17110, 1094.993157, 10.xxx.xxx.yy, 10.xxx.xxx.xx, TCP, 5900 > 47685
> [RST] Seq=5378391 Ack=3517578924 Win=0 Len=0
>
>
>
> No., Time, Source, Destination, Protocol, Info
>
> 10173, 1181.908519, 10.xxx.xxx.ww, 10.xxx.xxx.xx, X11, Requests:
> ChangeGC, PolyFillRectangle
> 10174, 1181.908527, 10.xxx.xxx.xx, 10.xxx.xxx.ww, TCP, x-server >
> cesdinv [ACK] Seq=143077 Ack=296289 Win=64076 Len=0
> 10175, 1182.548747, 10.xxx.xxx.ww, 10.xxx.xxx.xx, X11, Requests:
> ChangeGC, PolyFillRectangle
> 10176, 1182.548754, 10.xxx.xxx.xx, 10.xxx.xxx.ww, TCP, x-server >
> cesdinv [ACK] Seq=143077 Ack=296325 Win=64076 Len=0
> 10177, 1190.457622, 10.xxx.xxx.xx, 10.xxx.xxx.ww, X11, Event: KeyPress
> 10178, 1190.545568, 10.xxx.xxx.xx, 10.xxx.xxx.ww, X11, Event:
> KeyRelease
> 10179, 1190.657949, 10.xxx.xxx.xx, 10.xxx.xxx.ww, X11, [TCP
> Retransmission] Event: KeyPress, KeyRelease
> 10180, 1191.065955, 10.xxx.xxx.xx, 10.xxx.xxx.ww, X11, [TCP
> Retransmission] Event: KeyPress, KeyRelease
> 10181, 1191.881958, 10.xxx.xxx.xx, 10.xxx.xxx.ww, X11, [TCP
> Retransmission] Event: KeyPress, KeyRelease
> 10182, 1193.513948, 10.xxx.xxx.xx, 10.xxx.xxx.ww, X11, [TCP
> Retransmission] Event: KeyPress, KeyRelease
> 10183, 1196.777952, 10.xxx.xxx.xx, 10.xxx.xxx.ww, X11, [TCP
> Retransmission] Event: KeyPress, KeyRelease
> 10184, 1201.777943, 10.xxx.xxx.xx, 10.xxx.xxx.ww, ARP, Who has
> 10.xxx.xxx.ww? Tell 10.xxx.xxx.xx
> 10185, 1201.778397, 10.xxx.xxx.ww, 10.xxx.xxx.xx, ARP, 10.xxx.xxx.ww is
> at aa:aa:aa:aa:aa:aa
> 10186, 1203.305950, 10.xxx.xxx.xx, 10.xxx.xxx.ww, X11, [TCP
> Retransmission] Event: KeyPress, KeyRelease
> 10187, 1203.306227, 10.xxx.xxx.ww, 10.xxx.xxx.xx, TCP, cesdinv >
> x-server [RST] Seq=296325 Ack=2562995737 Win=0 Len=0
> 10188, 1203.469415, 10.xxx.xxx.xx, 10.xxx.xxx.ww, X11, Event:
> PropertyNotify
 
Reply With Quote
Reply

« browser-based authentication fails | UPD datagramms duplication »
Thread Tools
Display Modes
Linear Mode Linear Mode

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
TCP connection reset/aborted issue Daniel Weber Windows Networking 0 05-29-2009 08:22 AM
connection reset errors dave64 Linux Networking 1 11-10-2008 04:37 PM
help? connection must be reset after every reboot Kayne Wireless Internet 3 09-07-2007 02:31 PM
Connection Reset Dicorpo Wireless Networks 0 10-08-2004 03:35 PM
Tough problem! TCP reset issue Andy Low Linux Networking 2 02-28-2004 03:44 AM


Forum Software Powered by vBulletin®, Copyright Jelsoft Enterprises Ltd.
SEO by vBSEO 3.3.2 ©2009, Crawlability, Inc.
Contact Us - Archive - Privacy Statement - Top

1 2 3 4 5 6 7 8 9 10 11