RST flags on print server

[mrhcarlin]

We have a repro room with a few Ricoh MFDs. Although all staff use this room, it was our repro officer who reported the other week that some of the machines (possibly all) intermittently lose connection. I've never seen this myself and no-one else has reported such, but the repro officer admittedly does spend all day printing to these things so she may pick up on these infrequent occurrences. All print jobs go to a single virtual queue, and it's just a case of logging into any free machine to then release it.

 

So I pull up Wireshark on the print server and immediately start seeing RST flags going to the print server from various workstations. However, where I'm a bit stumped is what to look for inside these packets. I've had a scan through them but can't see any mention of a particular device/printer.

 

I have some theories after a little research, but I don't know how to effectively test them using Wireshark due to limited experience with the tool. How would I check if the server's receive buffer is filling up (Zero Windows)? Or how else could I use Wireshark to determine drops in connectivity between it and the printers?

 

Apologies if it's relatively simple or I'm being too vague!