Forum Discussion
Andy_McGrath
Oct 13, 2017Cumulonimbus
Would guess the IP address in the SYN-ACK response is not the same in the original SYN request so marking failing the monitor.
Recommend you do a tcpdump to capture the network traffic and see if any errors in the TCP packets.
K411: Overview of packet tracing with the tcpdump utility