Sorry if this is a bit off topic for the group.\n\nI have an issue that I am troubleshooting where a vendor indicates\ntheir box is losing connectivity between the client and server which\nis causing application issues.\n\nI SPAN'ed the port (Cisco 2960) of the client and am going through the\ncaptures and I noticed something that struck me as odd.\n\nClient issues a FIN, ACK\nServer issues a FIN, ACK\n\nHowever, after those FIN's I never see any ACK's from either side.\n\nAt this point the client starts attempting to reestablish the\nconnection (multiple SYN attempts) with no response from the server.\n\nAfter approx 10 attempts (20 seconds) the client issues a RST with an\nACK. This packets SEQ=0, ACK=1\n\nIf there is no associated connection so how can it issue the RST with\nan ACK?\n\nAfter it issues this RST packet it immediately establishes the\nconnection.\n\nQuestions:\n1.) Is it normal to see a RST packet not associated with an active\nconnection have the ACK flag set?\n2.) Speculation: because each side never really acknowledged the\nconnection close I suspect the connection may still be open on the\nserver end and the RST packet closed it on the server allowing it to\nbe recreated?\n\nAny thoughts regarding this? Sorry about the OT nature of this.\n\nAmy.