Solved

TCP/IP: 3-way Handshake

Posted on 2007-04-08
5
3,431 Views
Last Modified: 2012-06-21
Hello Experts,

I have a question regarding the 3-way tcp handshake.  Where does the fault lies when the sender does not send back an ACK?  This is the situation that I am currently getting.  We have two sender, A and B.  

A --> B     [SYN]
B --> A     [SYN, ACK]
A --> B     No response

Does this mean that A did not get the [SYN, ACK] from the second phase of the handshake?  Or did "A" block the third phase?  Can someone clarify this for me.  As always, thank you for your time on this matter...it is always appreciated.
0
Comment
Question by:coperator
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
5 Comments
 
LVL 8

Accepted Solution

by:
RGRodgers earned 250 total points
ID: 18873513
A should either ACK (called a SYN ACK ACK) or a NACK for either a bad message or timeout if A gets nothing from B.  A appears at fault.
0
 
LVL 5

Expert Comment

by:skaap2k
ID: 18885714
There could be a issue where one of these devices is using TCP SYN Cookies and the other does not know how to handle it (unlikely)

The best way to find out what is going on, is to take a Ethereal/Wireshark trace from both devices, and see whether A is indeed receiving the SYN ACK, and if it is sending the ACK/SYNACKACK to B ..

RN
0
 
LVL 8

Expert Comment

by:RGRodgers
ID: 18885845
All true, especially the Wireshark comment.  

However, whether A knew how to handle it or not, or received the ACK or not, A was obligated to respond with a SYN/ACK/ACK or a NACK.  No response is never correct.

But, do the trace and tell us what you see!  Thanks...
0
 
LVL 1

Author Comment

by:coperator
ID: 18888560
Unfortunately, I have no control of the other device.  It belongs to a client.  One thing I'd like to mention is the physical layout and where I was able to do a tcpdump.  Will call the client router A and my PIX B (OUTSIDE interface) and both are interconnected thru a switch C.

A -> C -> B

I was able to do a tcpdump from C.  I discovered that there was a Linux box setup to sniff and the port was configured for spanning.  So, that's were I was able to capture the packets.  Now, base on what I had described above, it seems that it is leaving my OUTSIDE interface of my PIX but I am not able to get an ACK from A.  Base on the conversation above, does this confirm that A is at fault?

As always, thank you for your time on this matter.
0
 
LVL 5

Assisted Solution

by:skaap2k
skaap2k earned 250 total points
ID: 18888587
More than likely, yes, that would be the issue.
0

Featured Post

Announcing the Most Valuable Experts of 2016

MVEs are more concerned with the satisfaction of those they help than with the considerable points they can earn. They are the types of people you feel privileged to call colleagues. Join us in honoring this amazing group of Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

SSL is a very common protocol used these days when browsing the web.  The purpose is to provide security to communication, but how does it do it?  There are several pieces at work that have to be setup before SSL will even work and it requires both …
We recently endured a series of broadcast storms that caused our ISP to shut us down for brief periods of time. After going through a multitude of tests, we determined that the issue was related to Intel NIC drivers on some new HP desktop computers …
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…

631 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question