Re: Diagnosing disconnect exactly every 10 minutes in online game. FIN/ACK and TCP RST packet problem.

[Pedro Tumusok <pedro.tumusok () gmail com>]

Do you have a bunch of retransmits?
It might be just as simple as there are packets dropped between you
and the server, and the the server thinks this connection sucks and
takes it down.

The game might use more than one port to maintain is connection with
the server, ie a second port for control messages or authentication.
Since you are using NAT, my guess its just some timeout values for the
NAT settings on your router that is not in sync with the game.
Ie the NAT mapping on the router times out and thereby traffic
intended for that port does not get forwarded to your pc/console and
the server thinks the connection is broken and just cleans up after
itself by taking down the tcp connection.

Best Regards
Pedro Tumusok

On Fri, Sep 10, 2010 at 11:09 AM, Martin Visser
<martinvisser99 () gmail com> wrote:
> Receiving a FIN-ACK from the server basically indicates that from server's
> point of view it is done with that session. Your client ACKnowledges that
> packet, and also concludes the session from it's end.  The RSTs are probably
> just the result of your clients packets that were still "in flight" at the
> time of session termination.
> So from a TCP protocol everything is normal, the server had nothing more to
> tell you on that session, so it ends it.
> It could be terminating for any reasons, maybe such as it doesn't believe
> you are authorised anymore, or the like. I imagine some gameservers might
> allow you to play with 0 credit for a period of time, or maybe it thinks the
> game running on your machine isn't genuine.
> It could also be that some other device like your firewall or the ISPs
> firewall is spoofing the server's FIN flag, but this is not likely - unless
> there was a good reason your ISP wanted to limit your traffic using that
> game.
> I'm not sure if this will help you, might you might be able to think of a
> reason why you are being dropped by the server.
>
> Regards, Martin
>
> MartinVisser99 () gmail com
>
>
> On Fri, Sep 10, 2010 at 4:31 PM, Austin Kretzer <austink3d () gmail com> wrote:
> > Hello everyone,
> > I am trying to find out some help or direction for a problem I am having.
> > I am playing an online game called Final Fantasy XIV, and for some reason
> > every 10 minutes exactly, I get disconnected. My connection quality up to
> > that point is fine, no lag. I don't know much about packets and Wireshark, I
> > just downloaded it today. I have been trying to fix this problem for days
> > now, with no luck. I ran Wireshark and started the game. Everything from my
> > basic knowledge appears normal up to the 10 minute mark where I get this
> > disconnect. I get hit by a FIN,ACK packet from the server for some reason,
> > which my IP then replies with a ACK, and then its own FIN,ACK packet. After
> > that I get four TCP RST packets from the server, and my connection goes
> > down. I have no idea why the server would be doing this, or if its something
> > in my own line doing it. Its the server's IP sending the first packet, but
> > that makes no sense that it would only target me.
> > This only happens with this game, I have no problem browsing the internet.
> > I have a 3MB DSL line from TDS. I hooked up my computer to a friends Comcast
> > cable connection and played the game and it worked fine for hours on end, so
> > I know its a connection issue. I have tried everything I know how to do, but
> > I am more of a software and hardware kind of guy. Networking is my weakpoint
> > besides the basics. I haven't found many people at all in the game having
> > the same problem, and I have only found a few issues like this online
> > through google with other games/general issues. I have tried every fix I
> > have found so far with no luck.
> > I have a screenshot of what happens at the 10 minute mark, as well as the
> > full capture of my 10 minute connection to the game for all of you to look
> > at.
> > Please go to:
> >
> > http://www.ffxivcore.com/topic/14215-error-code-30002-and-3102-13001-and-now-loading-error/page__st__20
> > There, I have the image as well as a link to my full capture.
> > I hope I am not asking too much, I am just terribly lost with this issue,
> > and I have ran out of ideas and I am to my wits end. Any help or suggestions
> > or anything at all would be greatly appreciated. Thank you for reading!
> >
> >
> >
> > ___________________________________________________________________________
> > Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
> > Archives:    http://www.wireshark.org/lists/wireshark-users
> > Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
> >
> > mailto:wireshark-users-request () wireshark org?subject=unsubscribe
>
>
> ___________________________________________________________________________
> Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
> Archives:    http://www.wireshark.org/lists/wireshark-users
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
>             mailto:wireshark-users-request () wireshark org?subject=unsubscribe



-- 
Best regards / Mvh
Jan Pedro Tumusok

I know you love me
And you want to be Friends
And if you dont
at least you need to pretend
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe