the weird FIN_WAIT_2 problem

[xray1111]

Hi, everybody

I encountered a strange situation. We have a tuxedo server deployed on a HP server (11.11), and we have our client application on remote PC which runs WinXP. And the staff who use the client program on PC always complain that the application runs too slowly.

So I use tcpdump tool filter the TCP packet between the client and the server, and found that sometimes the initial connection made by client didn't complete (not always), in this situation, the client didn't send FIN to server but only reply ACK according to the FIN packet sent by server. And the server keep trying to send FIN to client every 2 minutes for ever.

I wander why this problem could be happened, we know that the 8889 port of the tuxedo server is only a listen port, this port only respond to simple connection request and not mean to transfer application data after all.

09:50:22.676933 IP 135.133.23.61.1437 > 135.129.22.189.8889: S 3246342540:3246342540(0) win 65535
09:50:22.676983 IP 135.129.22.189.8889 > 135.133.23.61.1437: S 2409454420:2409454420(0) ack 3246342541 win 32768
09:50:22.746800 IP 135.133.23.61.1437 > 135.129.22.189.8889: . ack 1 win 65535
09:50:22.747440 IP 135.133.23.61.1437 > 135.129.22.189.8889: P 1:33(32) ack 1 win 65535
09:50:22.747885 IP 135.129.22.189.8889 > 135.133.23.61.1437: P 1:397(396) ack 33 win 32768
09:50:23.027960 IP 135.133.23.61.1437 > 135.129.22.189.8889: . ack 397 win 65139
09:50:28.006996 IP 135.129.22.189.8889 > 135.133.23.61.1437: F 397:397(0) ack 33 win 32768
09:50:28.036575 IP 135.133.23.61.1437 > 135.129.22.189.8889: . ack 398 win 65139
09:52:29.896762 IP 135.129.22.189.8889 > 135.133.23.61.1437: F 397:397(0) ack 33 win 32768
09:52:29.933538 IP 135.133.23.61.1437 > 135.129.22.189.8889: . ack 398 win 65139
09:54:31.789142 IP 135.129.22.189.8889 > 135.133.23.61.1437: F 397:397(0) ack 33 win 32768
09:54:31.799323 IP 135.133.23.61.1437 > 135.129.22.189.8889: . ack 398 win 65139
09:56:33.681579 IP 135.129.22.189.8889 > 135.133.23.61.1437: F 397:397(0) ack 33 win 32768
09:56:33.692432 IP 135.133.23.61.1437 > 135.129.22.189.8889: . ack 398 win 65139
......

[Steven Schweda]

If "HP server (11.11)" means HP-UX, then you
might do better in an HP-UX forum, instead of
this Tru64 forum.