Wireshark mailing list archives
Multiple syn's , syn/ack and ack received for single connection?
From: asad <a.alii85 () gmail com>
Date: Tue, 4 Aug 2015 20:13:37 +0500
I have a scenario, I'm analyzing ssl (decrpyt) traffic to my webserver. I'm
investigating server and end-to-end delay issues. In between this I'm stuck
at following traffic pattern for which I need some advice/suggestion. The
patter shows:-
client server
src port 1 -> 80 (syn)
src port 2 -> 80 (syn)
src port 3 -> 80 (syn)
src port 4 -> 80 (syn)
.....
server client
src port 80 -> 1 (syn/ack)
src port 80 -> 2 (syn/ack)
client server
src port 1 -> 80 (ack)
src port 2 -> 80 (ack)
After, complete of handshake I see <code>"http get request"</code> from
client. My issues is:-
1. why are multiple syns send from
client to server from different
source port
2. why server choose to
reply on NOT all ports mainly the
syn/ack is received by first 3
ports.
3. Multiple acks to different
ports?
a sample SYN request just for analysis looks like
"694 47.583499000 192.168.1.56 192.168.1.22 TCP 66
0.000173000 50844→80 [SYN] Seq=0 Win=8192 Len=0 MSS=1460 WS=4
SACK_PERM=1"
Please help me understand this behavior.
___________________________________________________________________________ Sent via: Wireshark-users mailing list <wireshark-users () wireshark org> Archives: https://www.wireshark.org/lists/wireshark-users Unsubscribe: https://wireshark.org/mailman/options/wireshark-users mailto:wireshark-users-request () wireshark org?subject=unsubscribe
Current thread:
- Multiple syn's , syn/ack and ack received for single connection? asad (Aug 04)
- Re: Multiple syn's , syn/ack and ack received for single connection? T B (Aug 04)
- Re: Multiple syn's , syn/ack and ack received for single connection? asad (Aug 04)
- Re: Multiple syn's , syn/ack and ack received for single connection? T B (Aug 04)
- Re: Multiple syn's , syn/ack and ack received for single connection? Saulpaugh, Chris (Aug 04)
- Re: Multiple syn's , syn/ack and ack received for single connection? asad (Aug 04)
- Re: Multiple syn's , syn/ack and ack received for single connection? T B (Aug 04)
- Re: Multiple syn's , syn/ack and ack received for single connection? asad (Aug 04)
- Re: Multiple syn's , syn/ack and ack received for single connection? asad (Aug 04)
- Re: Multiple syn's , syn/ack and ack received for single connection? T B (Aug 04)
- Re: Multiple syn's , syn/ack and ack received for single connection? asad (Aug 04)
