XG230 - Web radio lost connection - Invalid traffic in the log = Could not associate packet to any connection

Question

Hello, 
 i'm trying to found the origin of this problem : The connection to a web radio is lost after few minutes, there is a lot of Could not associate packet to any connection in the log to the IP of the web radio :

I created a rules, this rules works

i did a packet filter :

The rule 13

ip of radios.rtbf.be is 212.3.234.219, why have i a lot of Could not associate packet to any connection and some connection passed without any problem? 
 thank you for your help !

LuCar Toni · Accepted Answer

First of all, this is likely not an issue at all. 
 In my last 5 years experience, never was this dropped packet an issue - Mainly because its just a symptom for another issue. 
 Why does it occur? If you have a open connection (Client to Server) and someone in this connection (Server or Client) closes the connection for what ever reason, the other end will likely "Acknowledge" the closing. Or it will try to "force the connection to reset" etc. There are plenty of cases. Afterall those packets will do following: 
 XG gets a "please close the connection" packet. It will forward the packet to the server/client. In the same time, XG will delete the connection, because its not needed anymore. 
 Some applications are badly written or have other issues so to speak, so they will send multiple "please close this connection" packets. XG will use the first one to delete the session. Every other packet will be dropped, as XG do not have any open connection for this anymore (Stateful firewall). 
 There are some other reasons, why this can also occur: Cleanup sessions for example: You have a session build up to a Server and did your business. After some hours the server "clean up his connection table" and closes all connections left on his table. So he will send to every client a "Please close the connection" packet. XG already deleted the session after 3 hours. So XG does not know the session existed and drops this as well. 
 
 In each case, its not the actual issue at all. Why does the application in your case closes the connection? Could be a network issue but likely its a application issue. 
 Most customers, i talk to, i advice to actually disable the logging of invalid traffic, as this causes more harm than good to see those dropped packets.

XG230 - Web radio lost connection - Invalid traffic in the log => Could not associate packet to any connection

Top Replies