Q&A
Q&AWhat can tcpdump reveal when a TCP connection times out?
Packet direction and handshake behavior help locate whether loss occurs before or after the destination.
Read the concise answer
Capture narrowly at the client and, if possible, server. A SYN leaving without a reply suggests routing or filtering; a reset indicates an active rejection or no listener; a completed handshake moves investigation toward TLS or the application protocol. Packet captures can expose sensitive metadata or payloads, so limit capture scope and protect files.