A TCP Session That Ends with a TCP Reset May Not Indicate a Problem (272933)



The information in this article applies to:

  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Professional
  • Microsoft Windows NT Workstation 4.0
  • Microsoft Windows NT Server 4.0

This article was previously published under Q272933

SUMMARY

A TCP session that ends with a TCP reset may not indicate a problem. Sometimes TCP resets (RST) indicate a network problem, but there are cases in which a TCP reset is a good thing.

MORE INFORMATION

Because Transmission Control Protocol (TCP) is connection-oriented, most information technology (IT) professionals prefer to see the exchange of FIN ACK packets to perform session teardown. However, in some instances application developers elect to issue a Reset instead to free up resources more quickly for waiting users.

A Reset may also be observed in instances where the destination TCP host is not running the desired service, or if the destination port is unavailable. Both of these methods of session teardown are compliant with RFC 1122:

4.2.2.13 Closing a Connection: RFC-793 Section 3.5

A TCP connection may terminate in two ways:

(1) the normal TCP close sequence using a FIN handshake, and

(2) an "abort" in which one or more RST segments are sent and the connection state is immediately discarded.

For additional information, click the article number below to view the article in the Microsoft Knowledge Base:

172983 Explanation of the Three-Way Handshake via TCP/IP

REFERENCES

For additional information, see the following World Wide Web Consortium Web site: Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.

Modification Type:MinorLast Reviewed:1/25/2006
Keywords:kbinfo kbnetwork KB272933