Why would one server be sending DUP ACK packets to one PC, which is responding with HTTP RST packets?
- by IronicMuffin
I'm not a network profressional, so please excuse any wrong language.
I was debugging why my DNS traffic was a constant 160Kbps on our corporate network. I opened up a wireshark trace, and I see one PC of a coworker broadcasting HTTP [RST] packets to one of our DMZ servers at the rate of 1000 a second.
He restarted his machine, and as soon as it went offline, the server started broadcasting [DUP] [ACK] packets, until he came back online. It then resumed the HTTP [RST] packets.
Apparently this server has been doing this kind of behavior since it went live. I believe it did this with a printer and an access point as well.
Can anyone explain why this behavior is occurring? Any solutions?
The initial research was done because there have been "bandwidth issues" and I wonder if this is contributing.