For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

RaphaelL's avatar
RaphaelL
Icon for Nimbostratus rankNimbostratus
Oct 15, 2021

TCP Closing session with wrong SEQ and ACK

Hi ,

 

While troubleshooting an issue with a connexion towards our LTM , I did a packet capture and I was intrigued by the way our LTM is closing it's TCP sessions.

 

The client sends a FIN,ACK , the LTM responds with a ACK then a FIN,ACK and finally the client sends a ACK and the session is closed and everyone is happy... except Wireshark !

 

The LTM seems not to be using the wrong SEQ and ACK numbers in its FIN,ACK and Wireshark flags both packets as TCP out of order ( since the numbers don't match up )

 

Here is an example :

 

 

 

We are running : BIG-IP 12.1.5.3 Build 0.16.5 Engineering Hotfix

 

Anyone have an Idea why are we seeing this odd behavior ?

 

Thanks ,

No RepliesBe the first to reply