Connection reset by peer

Sun Dec 10 18:22:00 2006

Hello

I am trying to resolve connection issues between a
Linux box running Suse 10.0 2.6.16.21-0.25-default
and a windows 2000 machine using VNC.

Below are the last parts of an ethereal capture session

The Linux box begins begins a set of TCP Retransmissions
with what seems to be the appropriate delays.
Then sends out an ARP request. Gets an answer back.
Sends out a another TCP Retransmission.
The Windows machine responds with a reset RST.
The VNC viewer closes out generating
connection reset by peer message.
The VNC log also shows a connection reset by peer message

I don't know if its VNC that is unhappy with the TCP
requests or it is something in the TCP software.

There are no firewalls involved. Both machines
are fully patched.  Other Linux boxes in
the same group exhibit the same behavior.
I can keep VNC sessions to the same Windows machine
 open all day from my Windows XP laptop  from pretty
much anywhere I go. but cannot do it from
boxes sitting a few feet apart.

Any ideas? Tips? Tricks? Settings to massage?

Thanks in advance
Rich

No., Time, Source, Destination, Protocol, Info

17089, 1047.417807, 10.xxx.xxx.xx, 10.xxx.xxx.yy, TCP, 47685 > 5900
[PSH, ACK] Seq=50510 Ack=5378391 Win=32444 Len=10 TSV=19794218
TSER=12853209
17090, 1047.420693, 10.xxx.xxx.xx, 10.xxx.xxx.yy, TCP, 47685 > 5900
[PSH, ACK] Seq=50520 Ack=5378391 Win=32444 Len=6 TSV=19794218
TSER=12853209
17091, 1047.420929, 10.xxx.xxx.yy, 10.xxx.xxx.xx, TCP, 5900 > 47685
[ACK] Seq=5378391 Ack=50526 Win=64721 Len=0 TSV=12853209 TSER=19794218
17092, 1047.429041, 10.xxx.xxx.xx, 10.xxx.xxx.yy, TCP, 47685 > 5900
[PSH, ACK] Seq=50526 Ack=5378391 Win=32444 Len=6 TSV=19794221
TSER=12853209
17093, 1047.544950, 10.xxx.xxx.xx, 10.xxx.xxx.yy, TCP, 47685 > 5900
[PSH, ACK] Seq=50532 Ack=5378391 Win=32444 Len=10 TSV=19794250
TSER=12853209
17094, 1047.545192, 10.xxx.xxx.yy, 10.xxx.xxx.xx, TCP, 5900 > 47685
[ACK] Seq=5378391 Ack=50542 Win=64705 Len=0 TSV=12853210 TSER=19794221
17095, 1049.167048, 10.xxx.xxx.yy, Broadcast, ARP, Who has
10.xxx.xxx.zz?  Tell 10.xxx.xxx.yy
17096, 1053.167105, 10.xxx.xxx.yy, Broadcast, ARP, Who has
10.xxx.xxx.zz?  Tell 10.xxx.xxx.yy
17097, 1055.548936, 10.xxx.xxx.xx, 10.xxx.xxx.yy, TCP, 47685 > 5900
[PSH, ACK] Seq=50542 Ack=5378391 Win=32444 Len=10 TSV=19796251
TSER=12853210
17098, 1055.729563, 10.xxx.xxx.yy, 10.xxx.xxx.xx, TCP, 5900 > 47685
[ACK] Seq=5378391 Ack=50552 Win=64695 Len=0 TSV=12853292 TSER=19796251
17099, 1063.552880, 10.xxx.xxx.xx, 10.xxx.xxx.yy, TCP, 47685 > 5900
[PSH, ACK] Seq=50552 Ack=5378391 Win=32444 Len=10 TSV=19798252
TSER=12853292
17100, 1063.714109, 10.xxx.xxx.yy, 10.xxx.xxx.xx, TCP, 5900 > 47685
[ACK] Seq=5378391 Ack=50562 Win=64685 Len=0 TSV=12853372 TSER=19798252
17101, 1071.556933, 10.xxx.xxx.xx, 10.xxx.xxx.yy, TCP, 47685 > 5900
[PSH, ACK] Seq=50562 Ack=5378391 Win=32444 Len=10 TSV=19800253
TSER=12853372
17102, 1071.928836, 10.xxx.xxx.xx, 10.xxx.xxx.yy, TCP, [TCP
Retransmission] 47685 > 5900 [PSH, ACK] Seq=50562 Ack=5378391 Win=32444
Len=10 TSV=19800346 TSER=12853372
17103, 1072.672836, 10.xxx.xxx.xx, 10.xxx.xxx.yy, TCP, [TCP
Retransmission] 47685 > 5900 [PSH, ACK] Seq=50562 Ack=5378391 Win=32444
Len=10 TSV=19800532 TSER=12853372
17104, 1074.160837, 10.xxx.xxx.xx, 10.xxx.xxx.yy, TCP, [TCP
Retransmission] 47685 > 5900 [PSH, ACK] Seq=50562 Ack=5378391 Win=32444
Len=10 TSV=19800904 TSER=12853372
17105, 1077.136846, 10.xxx.xxx.xx, 10.xxx.xxx.yy, TCP, [TCP
Retransmission] 47685 > 5900 [PSH, ACK] Seq=50562 Ack=5378391 Win=32444
Len=10 TSV=19801648 TSER=12853372
17106, 1083.088842, 10.xxx.xxx.xx, 10.xxx.xxx.yy, TCP, [TCP
Retransmission] 47685 > 5900 [PSH, ACK] Seq=50562 Ack=5378391 Win=32444
Len=10 TSV=19803136 TSER=12853372
17107, 1088.088830, 10.xxx.xxx.xx, 10.xxx.xxx.yy, ARP, Who has
10.xxx.xxx.yy?  Tell 10.xxx.xxx.xx
17108, 1088.088977, 10.xxx.xxx.yy, 10.xxx.xxx.xx, ARP, 10.xxx.xxx.yy is
at aa:aa:aa:aa:aa:aa
17109, 1094.992838, 10.xxx.xxx.xx, 10.xxx.xxx.yy, TCP, [TCP
Retransmission] 47685 > 5900 [PSH, ACK] Seq=50562 Ack=5378391 Win=32444
Len=10 TSV=19806112 TSER=12853372
17110, 1094.993157, 10.xxx.xxx.yy, 10.xxx.xxx.xx, TCP, 5900 > 47685
[RST] Seq=5378391 Ack=3517578924 Win=0 Len=0