what tcp events are flaged ?
TCP retransmission
TCP out of orders
duplicate ACKS
zero windows
The capture file showed several TCP resets. What did they tell us? What were the next steps? What key header values pointed to the root cause?
check the TTL of the IP packet , to see that the TTL(255,128,64) is still 64 which means that have not been routed
the source can only handling 30 to 40 connections each time, any addtional attempt from the user will be reset,reconfigure the server will solve the problem