Yes,
If the stack resets (the whole stack) then your RDP connection goes bye bye. If another system sends a tcp-reset to a session then only that session gets reset. (Basically what an IPS would do in certain situations) Z Edward Ziots CISSP, Security +, Network + Security Engineer Lifespan Organization [email protected] From: Steve Ens [mailto:[email protected]] Sent: Tuesday, May 22, 2012 4:09 PM To: NT System Admin Issues Subject: Re: TCP/IP stack reset One follow up question...if the stack is resetting, would an RDP connection be dropped as well? ie. If I'm RDP'ing into the server and the stack gets reset...do I lose my connection? Because, during the whole debacle on Thursday, not once was I kicked off. Just curious. On Thu, May 17, 2012 at 11:03 AM, Daniel Chenault < [email protected]> wrote: If the stack is resetting than it is dropping all current connections. This would be evident in the trace by workstationA sending a packet to ServerA with a response of RST. Following that would be the standard 3-way TCP handshake. I question the robustness of an app that cannot gracefully handle a reset from another layer. I also question why the stack would be resetting frequently enough to be an issue. Resetting a specific connection, sure, but the whole stack? Dubious allegation. Check the trace. Daniel Chenault [email protected] From: Steve Ens [mailto:[email protected]] Sent: Thursday, May 17, 2012 10:55 AM To: NT System Admin Issues Subject: TCP/IP stack reset Morning/afternoon all... I have a particular application that is giving me headaches. It is client/server based app that is constantly crashing. The vendor is saying it is a network issue: that the network stack is resetting causing one of the services to crash. I've updates the NIC drivers, the HP team drivers and checked the switches and even changed the ports on the switch. I've install wireshark, but am having some difficulty interpreting the capture logs. Any ideas on what to look for would be greatly appreciated. Thanks ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
<<image001.jpg>>
