Description

Customer reported intermittent issues while accessing Product Finder. A packet capture (PCAP) analysis was performed to identify the root cause.

Symptoms

Multiple TCP RST, ACK packets were observed originating from the client IP x.x.x.x, targeting multiple destination IPs.

Solution


The TCP RST, ACK packets are consistently initiated by the client (x.x.x.x).


The observed traffic pattern indicates the following behaviour:


  1. The client establishes a TCP session and sends application data.
  2. Immediately after, the client resets the TCP session by sending a RST, ACK.
  3. The client then opens new TCP connections.
  4. This sequence repeats across multiple destination IPs.

On the server side (e.g., y.y.y.y), traffic shows ongoing TLS Application Data exchange, indicating that the server continues to operate normally.

No TCP resets, packet drops, or abnormal behaviour are observed from the SSR datapath.


Modification History

2026-02-10 : Article Created