You are not logged in.

#1 2011-05-10 10:35:24

Basil8
Member
Registered: 2011-05-10
Posts: 1

Client send RST

Hello,
Sometimes my laptop ceases to open web-pages, however pings and torrents are OK.
After reboot all becomes normal. Below is three frames from Wireshark.

No.     Time        Source                Destination           Protocol Info
     39 181.026989  192.168.1.100         74.125.43.139         TCP      52804 > http [SYN] Seq=0 Win=5360 Len=0 MSS=536 SACK_PERM=1 TSV=34115391 TSER=0 WS=1

Frame 39: 74 bytes on wire (592 bits), 74 bytes captured (592 bits)
    Arrival Time: May 10, 2011 19:56:29.485042000 VLAST
    Epoch Time: 1305017789.485042000 seconds
    [Time delta from previous captured frame: 0.085569000 seconds]
    [Time delta from previous displayed frame: 0.085569000 seconds]
    [Time since reference or first frame: 181.026989000 seconds]
    Frame Number: 39
    Frame Length: 74 bytes (592 bits)
    Capture Length: 74 bytes (592 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Ethernet II, Src: AsustekC_22:02:4f (90:e6:ba:22:02:4f), Dst: Tp-LinkT_c2:13:3c (00:27:19:c2:13:3c)
    Destination: Tp-LinkT_c2:13:3c (00:27:19:c2:13:3c)
        Address: Tp-LinkT_c2:13:3c (00:27:19:c2:13:3c)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: AsustekC_22:02:4f (90:e6:ba:22:02:4f)
        Address: AsustekC_22:02:4f (90:e6:ba:22:02:4f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.100 (192.168.1.100), Dst: 74.125.43.139 (74.125.43.139)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x25b5 (9653)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (6)
    Header checksum: 0xdcf2 [correct]
        [Good: True]
        [Bad: False]
    Source: 192.168.1.100 (192.168.1.100)
    Destination: 74.125.43.139 (74.125.43.139)
Transmission Control Protocol, Src Port: 52804 (52804), Dst Port: http (80), Seq: 0, Len: 0
    Source port: 52804 (52804)
    Destination port: http (80)
    [Stream index: 10]
    Sequence number: 0    (relative sequence number)
    Header length: 40 bytes
    Flags: 0x02 (SYN)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...0 .... = Acknowledgement: Not set
        .... .... 0... = Push: Not set
        .... .... .0.. = Reset: Not set
        .... .... ..1. = Syn: Set
        .... .... ...0 = Fin: Not set
    Window size: 5360
    Checksum: 0x3843 [validation disabled]
    Options: (20 bytes)

No.     Time        Source                Destination           Protocol Info
     40 181.199718  74.125.43.139         192.168.1.100         TCP      http > 52804 [SYN, ACK] Seq=0 Ack=1 Win=5672 Len=0 MSS=1360 SACK_PERM=1 TSV=1516298718 TSER=34080080 WS=6

Frame 40: 74 bytes on wire (592 bits), 74 bytes captured (592 bits)
    Arrival Time: May 10, 2011 19:56:29.657771000 VLAST
    Epoch Time: 1305017789.657771000 seconds
    [Time delta from previous captured frame: 0.172729000 seconds]
    [Time delta from previous displayed frame: 0.172729000 seconds]
    [Time since reference or first frame: 181.199718000 seconds]
    Frame Number: 40
    Frame Length: 74 bytes (592 bits)
    Capture Length: 74 bytes (592 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Ethernet II, Src: Tp-LinkT_c2:13:3c (00:27:19:c2:13:3c), Dst: AsustekC_22:02:4f (90:e6:ba:22:02:4f)
    Destination: AsustekC_22:02:4f (90:e6:ba:22:02:4f)
        Address: AsustekC_22:02:4f (90:e6:ba:22:02:4f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: Tp-LinkT_c2:13:3c (00:27:19:c2:13:3c)
        Address: Tp-LinkT_c2:13:3c (00:27:19:c2:13:3c)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 74.125.43.139 (74.125.43.139), Dst: 192.168.1.100 (192.168.1.100)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x105f (4191)
    Flags: 0x00
        0... .... = Reserved bit: Not set
        .0.. .... = Don't fragment: Not set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 50
    Protocol: TCP (6)
    Header checksum: 0x4049 [correct]
        [Good: True]
        [Bad: False]
    Source: 74.125.43.139 (74.125.43.139)
    Destination: 192.168.1.100 (192.168.1.100)
Transmission Control Protocol, Src Port: http (80), Dst Port: 52804 (52804), Seq: 0, Ack: 1, Len: 0
    Source port: http (80)
    Destination port: 52804 (52804)
    [Stream index: 10]
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 40 bytes
    Flags: 0x12 (SYN, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgement: Set
        .... .... 0... = Push: Not set
        .... .... .0.. = Reset: Not set
        .... .... ..1. = Syn: Set
        .... .... ...0 = Fin: Not set
    Window size: 5672
    Checksum: 0xc738 [validation disabled]
    Options: (20 bytes)
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
     41 181.199769  192.168.1.100         74.125.43.139         TCP      52804 > http [RST] Seq=1 Win=0 Len=0

Frame 41: 54 bytes on wire (432 bits), 54 bytes captured (432 bits)
    Arrival Time: May 10, 2011 19:56:29.657822000 VLAST
    Epoch Time: 1305017789.657822000 seconds
    [Time delta from previous captured frame: 0.000051000 seconds]
    [Time delta from previous displayed frame: 0.000051000 seconds]
    [Time since reference or first frame: 181.199769000 seconds]
    Frame Number: 41
    Frame Length: 54 bytes (432 bits)
    Capture Length: 54 bytes (432 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp]
    [Coloring Rule Name: TCP RST]
    [Coloring Rule String: tcp.flags.reset eq 1]
Ethernet II, Src: AsustekC_22:02:4f (90:e6:ba:22:02:4f), Dst: Tp-LinkT_c2:13:3c (00:27:19:c2:13:3c)
    Destination: Tp-LinkT_c2:13:3c (00:27:19:c2:13:3c)
        Address: Tp-LinkT_c2:13:3c (00:27:19:c2:13:3c)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: AsustekC_22:02:4f (90:e6:ba:22:02:4f)
        Address: AsustekC_22:02:4f (90:e6:ba:22:02:4f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.100 (192.168.1.100), Dst: 74.125.43.139 (74.125.43.139)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 40
    Identification: 0x0000 (0)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (6)
    Header checksum: 0x02bc [correct]
        [Good: True]
        [Bad: False]
    Source: 192.168.1.100 (192.168.1.100)
    Destination: 74.125.43.139 (74.125.43.139)
Transmission Control Protocol, Src Port: 52804 (52804), Dst Port: http (80), Seq: 1, Len: 0
    Source port: 52804 (52804)
    Destination port: http (80)
    [Stream index: 10]
    Sequence number: 1    (relative sequence number)
    Header length: 20 bytes
    Flags: 0x04 (RST)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...0 .... = Acknowledgement: Not set
        .... .... 0... = Push: Not set
        .... .... .1.. = Reset: Set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size: 0
    Checksum: 0x74ab [validation disabled]

Any ideas why sends RST?

P.S. Sorry for my English.

Offline

Board footer

Powered by FluxBB