-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 cisco4ng wrote:
> [EMAIL PROTECTED] tcpdump -i eth1 -nn -n host 10.1.1.140 > tcpdump: listening on eth1 > 09:41:09.320478 10.1.1.140.1691 > 10.250.97.9.18190: S > 1398211834:1398211834(0) win 65535 <mss 1260,nop,nop,sackOK> (DF) > 09:41:09.320577 10.250.97.9.18190 > 10.1.1.140.1691: S > 1966160124:1966160124(0) ack 1398211835 win 5840 <mss 1460,nop,nop,sackOK> > (DF) > 09:41:09.325886 10.1.1.140.1691 > 10.250.97.9.18190: . ack 1 win 65535 (DF) ..... > 09:41:10.846811 10.250.97.9.18190 > 10.1.1.140.1691: P 4011:4224(213) ack > 1460 win 8576 (DF) > 09:41:10.978540 10.1.1.140.1691 > 10.250.97.9.18190: . ack 4224 win 64478 (DF) > 09:41:12.150286 10.1.1.140.1691 > 10.250.97.9.18190: R 1460:1460(0) ack 4224 > win 0 (DF) > > as you can see the in the tcpdump, host MDG 10.1.1.140 is the one > actually sent the Reset. 10.1.1.140 was the GUI. Was it not? So either the GUI or the device in between does the RESET. So do the same thing on both ends (MDG + P1) at the same time to find out which one of the 2 actually sends the Reset. Another puzzeling thing is that for a number of packets each packet from the MDG decreases the Window size in size equal to the number of packets in the previous packet send by the MDG. That would normally indicate that the MDG has not seen the acknowledgements. But the Sequence and Acknowledgement numbers seem to indicate a normal flow of data. To get a grip on the issue I would like to see the other side of the communication as well. Hugo. - -- [EMAIL PROTECTED] http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHOzrmBvzDRVjxmYERApmBAJ0eNg5LO6AcQLl9o9g2zSlzTWSUfACfZmVi j0RHLtWW9EneLg+M7puoCXw= =qyuA -----END PGP SIGNATURE----- ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
