I'm Nozomi Sawayama.
I hava a question about Ethereal.
Could you response any advice?
<Question>
In order to analyse a trouble with a client/server http connection,
I'm running Ethereal on ClientPC(Windows) and Web-Server(Unix);
When I try to capture traffic on Web-Server,
why am I not seeing any TCP packets about an interrupted connection between
Client-PC and Web-Server,
although I can see TCP packets (see below) on Client-PC?
<Environment>
・Client-PC
OS Windows 2000
Ethereal 0.10.14
Filter Option -f tcp port 80 and host 11.226.108.60
・Web-Server
OS Solaris
Ethereal 0.9.16 (ethereal-0.9.16-solaris2.9-sparc-loca)
Filter Option -f "tcp port 80"
<TCP packets on Client-PC>
・Communication is interrupted by RST flag(No.278)
No. Time Source Destination
Protocol Info
269 2006-04-27 14:04:54.547990 Client Server TCP
1290 > http [SYN] Seq=0 Ack=0 Win=64240 Len=0 MSS=1460
270 2006-04-27 14:04:54.581636 Server Client TCP
http > 1290 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460
271 2006-04-27 14:04:54.581646 Client Server TCP
1290 > http [ACK] Seq=1 Ack=1 Win=64240 [TCP CHECKSUM INCORRECT] Len=0
272 2006-04-27 14:04:54.581921 Client Server HTTP
POST /ci/htdocs/RSW1001010RegisterAction.do?undefined HTTP/1.1
273 2006-04-27 14:04:54.581962 Client Server HTTP
Continuation or non-HTTP traffic
274 2006-04-27 14:04:54.627650 Server Client TCP
http > 1290 [ACK] Seq=1 Ack=668 Win=8192 Len=0
275 2006-04-27 14:04:57.228120 Client Server HTTP
[TCP Retransmission] Continuation or non-HTTP traffic
276 2006-04-27 14:05:02.478087 Client Server HTTP
[TCP Retransmission] Continuation or non-HTTP traffic
277 2006-04-27 14:05:12.978037 Client Server HTTP
[TCP Retransmission] Continuation or non-HTTP traffic
278 2006-04-27 14:05:22.036458 Client Server TCP
1290 > http [RST] Seq=1880 Ack=1 Win=0 Len=0
---
SAWAYAMA, Nozomi
E-mail: sawayaman@xxxxxxxxxxxxx