That's what I figured. Thanks Z. On Tue, May 22, 2012 at 3:15 PM, Ziots, Edward <[email protected]> wrote:
> Yes, **** > > ** ** > > If the stack resets (the whole stack) then your RDP connection goes bye > bye. If another system sends a tcp-reset to a session then only that > session gets reset. (Basically what an IPS would do in certain situations) > **** > > ** ** > > Z**** > > ** ** > > Edward Ziots**** > > CISSP, Security +, Network +**** > > Security Engineer**** > > Lifespan Organization**** > > [email protected]**** > > ** ** > > *From:* Steve Ens [mailto:[email protected]] > *Sent:* Tuesday, May 22, 2012 4:09 PM > > *To:* NT System Admin Issues > *Subject:* Re: TCP/IP stack reset**** > > ** ** > > One follow up question...if the stack is resetting, would an RDP > connection be dropped as well? ie. If I'm RDP'ing into the server and the > stack gets reset...do I lose my connection? Because, during the whole > debacle on Thursday, not once was I kicked off. Just curious. **** > > On Thu, May 17, 2012 at 11:03 AM, Daniel Chenault < > [email protected]> wrote:**** > > If the stack is resetting than it is dropping all current connections. > This would be evident in the trace by workstationA sending a packet to > ServerA with a response of RST. Following that would be the standard 3-way > TCP handshake.**** > > **** > > I question the robustness of an app that cannot gracefully handle a reset > from another layer. I also question why the stack would be resetting > frequently enough to be an issue. Resetting a specific connection, sure, > but the whole stack? Dubious allegation. Check the trace.**** > > **** > > Daniel Chenault**** > > [email protected]**** > > [image: Description: Description: cid:[email protected]]**** > > **** > > *From:* Steve Ens [mailto:[email protected]] > *Sent:* Thursday, May 17, 2012 10:55 AM > *To:* NT System Admin Issues > *Subject:* TCP/IP stack reset**** > > **** > > Morning/afternoon all...**** > > I have a particular application that is giving me headaches. It is > client/server based app that is constantly crashing. The vendor is saying > it is a network issue: that the network stack is resetting causing one of > the services to crash. I've updates the NIC drivers, the HP team drivers > and checked the switches and even changed the ports on the switch. I've > install wireshark, but am having some difficulty interpreting the capture > logs. Any ideas on what to look for would be greatly appreciated.**** > > Thanks**** > > **** > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to [email protected] > with the body: unsubscribe ntsysadmin**** > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to [email protected] > with the body: unsubscribe ntsysadmin**** > > ** ** > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to [email protected] > with the body: unsubscribe ntsysadmin**** > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to [email protected] > with the body: unsubscribe ntsysadmin > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
<<image001.jpg>>
