Hi,
I have a similar problem as is described in this post https://www.zabbix.com/forum/zabbix-...ra-rst-packets. I have extra RST packets sent at the end of the connection instead of a normal TCP close (with FIN). I am using TLS connection with a pre-shared key (PSK)
The 38th packet (in gray) sends a FIN with the Close Notify alert. The server sends also the alert and then sends an RST packet. The image below shows the exchange diagram (left is TCP flags, right is the same with the TLS communcation info)
This is annoying since it seems that the connection is closed with the RST flags instead of the FIN creating unnecesary logs in the firewall complicating the analysis of actual blocked connections.
Is this behaviour normal in Zabbix connections ?
I have a similar problem as is described in this post https://www.zabbix.com/forum/zabbix-...ra-rst-packets. I have extra RST packets sent at the end of the connection instead of a normal TCP close (with FIN). I am using TLS connection with a pre-shared key (PSK)
The 38th packet (in gray) sends a FIN with the Close Notify alert. The server sends also the alert and then sends an RST packet. The image below shows the exchange diagram (left is TCP flags, right is the same with the TLS communcation info)
This is annoying since it seems that the connection is closed with the RST flags instead of the FIN creating unnecesary logs in the firewall complicating the analysis of actual blocked connections.
Is this behaviour normal in Zabbix connections ?
Comment