Re: TCP RST and why that might happen

From: Michael Fuhr (mfuhr_at_fuhr.org)
Date: 12/03/04

  • Next message: Peter T. Breuer: "Re: Have virtual memory limits on linux changed since 1997?" 
    Date: 3 Dec 2004 14:49:23 -0700

    Tauno Voipio <tauno.voipio.REMOVE@iki.fi.NOSPAM> writes:

    > Pete wrote:
    > > Anyone have a clue as to why a connection I create with a server would cause
    > > a TCP RST to be sent from the server? Here's the gist.
    > >
    > > I am working on a Gaim client for exchange messenging. Currently, I can send
    > > a message to the server, but all I get back is the TCP RST on port 80. I at
    > > first assumed it was a bad message, but if I send an identical message to
    > > one the actual MS client sends (retrieved using ethereal), I get the same
    > > behavior. I assume then it's a problem with my setup. Not sure what though.
    > > Anyone have a suggestion?
    >
    > Sounds like a firewall reject.

    Maybe, but there's not enough information to say for sure. He says
    he can send a message but all he gets back is RST -- does that mean
    that the original three-way handshake was successful and it's later
    that he gets the RST? Or does it mean that he sent SYN but got RST
    in response? Seeing tcpdump or tethereal output from the good and
    bad connections might shed some light on what's happening. 

    -- 
Michael Fuhr
http://www.fuhr.org/~mfuhr/
  • Next message: Peter T. Breuer: "Re: Have virtual memory limits on linux changed since 1997?"

    Relevant Pages

    • Re: Socket weirdness
      ... understand yet is why RST is not set in the header of outgoing data ... if the server does a send after Receive is closed? ... TCP connection can be "half-open", meaning one directon is closed, ... "TCP provides the ability for one end of a connection to terminate its output, while still receiving data from the other end. ...
      (microsoft.public.dotnet.framework)
    • Re: TCP socket close problem
      ... use for the RST anymore - the seq number of those RSTs is taken from the ... acceptable by the server. ... probably most likely at the client end, ... Client asks for something that the server will send in 2 packets. ...
      (comp.unix.bsd.freebsd.misc)
    • Re: Active response... some thoughts.
      ... a rst will not have ... TCP RST is more than just a marketing ... It causes immediate connection ... >> the single packet attack! ...
      (Focus-IDS)
    • Re: RST.B .... can anyone shed some light?
      ... >> My name is Dave Rosendahl, and unfortunately it seems one of my ... > the SSH attacks by script kiddies a few months back. ... > The server that RST tries to contact is long gone, and it's easy to spot RST ...
      (comp.os.linux.security)
    • Re: TCP reset caused by socket.py
      ... seems that all POST requests to Trac's standalone server have ... chance the server will issue a TCP RST. ... A RST when you close a socket is OK. ... handling each request on its own thread. ...
      (comp.lang.python)