cancel
Showing results for 
Search instead for 
Did you mean: 

TCP Closing session with wrong SEQ and ACK

RaphaelL
Nimbostratus
Nimbostratus

Hi ,

 

While troubleshooting an issue with a connexion towards our LTM , I did a packet capture and I was intrigued by the way our LTM is closing it's TCP sessions.

 

The client sends a FIN,ACK , the LTM responds with a ACK then a FIN,ACK and finally the client sends a ACK and the session is closed and everyone is happy... except Wireshark !

 

The LTM seems not to be using the wrong SEQ and ACK numbers in its FIN,ACK and Wireshark flags both packets as TCP out of order ( since the numbers don't match up )

 

Here is an example :

 

 

0691T00000F63ekQAB.png

 

0691T00000F63fYQAR.png

We are running : BIG-IP 12.1.5.3 Build 0.16.5 Engineering Hotfix

 

Anyone have an Idea why are we seeing this odd behavior ?

 

Thanks ,

0 REPLIES 0