Connection Reset

Also known as: ECONNRESET, connection reset by peer

An established session torn down mid-transfer by one side sending a TCP reset. Sources include an overloaded server shedding surplus connections, a home router with an exhausted NAT table, and network equipment interfering with plaintext traffic. Reducing the connection count and moving to encrypted port 563 clears most cases. Newsreaders retry affected segments automatically, so occasional resets surface only as retries in the log.

Unlike a refusal, a reset arrives after work has already been done. The session opened, credentials were accepted, and article data was flowing. The log entry therefore lands in the middle of a download rather than at the start of one, and the client normally requeues the affected segment without comment. That timing is the most useful clue available, because it excludes ports, hostnames and credentials outright.

When a reset is routine

Occasional resets are expected at scale. A client holding twenty connections open for several hours will collect a handful of them from ordinary maintenance, load balancing, or one node in a server pool restarting. The newsreader retries the segment on another connection, the file completes, and nothing is lost. Resets deserve attention only when they arrive in bursts, when they consistently hit one server entry while another runs clean, or when throughput visibly collapses because the client spends more time reconnecting than transferring.

What tears an established session down

  • A server shedding surplus load, or a single machine in a round-robin pool going down for maintenance.
  • A home router with an exhausted NAT table. Many consumer devices track only a few thousand simultaneous sessions, and a newsreader at a high connection count across two servers, plus everything else on the network, can reach that ceiling.
  • Network equipment interfering with plaintext traffic on port 119. An encrypted session on 563 presents nothing to inspect, which is why a port change resolves cases that otherwise look inexplicable.
  • An unstable physical link, particularly weak Wi-Fi or a marginal DSL or coaxial line.
  • The account sitting at its simultaneous connection allowance, where some servers drop surplus sessions rather than answering with a response code.

Narrowing it to the local network

Fault assignment turns on a single observation: whether other traffic on the same line suffers at the same moment. If a large web download stutters or a video call breaks up whenever the resets cluster, the problem is the local link or the router, not the news server. If everything else on the connection is stable and only one configured provider resets while a second entry transfers cleanly, the fault is at that provider or on the path to it, and such episodes usually clear within the hour without any action.

Settings worth changing first

Reduce the connection count before anything else. Dropping from thirty to ten costs little real throughput on a residential line, since a handful of connections already saturate one, and it relieves router pressure and account allowance pressure at the same time. Then move the server entry to 563 with SSL enabled. Where a backup server is configured, confirm the client is not opening its full allowance against both at once. Rebooting the router clears a full NAT table but does nothing to stop it filling again, so it is a test rather than a fix.

Resets that are actually something else

A download that stops dead and never resumes, with connections still shown as active, is a stalled transfer rather than a reset. Segments that fail repeatedly on every server with the same article are missing rather than reset. And a session that closes cleanly after a period of inactivity is an idle timeout, which is normal server behavior and produces no error at all in most clients.

Frequently asked questions

A few resets an hour are normal at high connection counts and cost nothing, since the client retries the segment automatically. Repeated bursts usually trace to a router with a full NAT table, too many connections configured, an unstable link, or equipment interfering with unencrypted traffic on port 119. Lowering the connection count and switching to 563 clears most cases.
Rarely. A provider outage stops connections from opening at all rather than cutting them mid-transfer. Resets that affect one configured server while a second runs cleanly at the same moment point at that provider or the route to it, and typically clear within the hour. Resets that coincide with other traffic on the line struggling are local.

Browse all terms in Errors & Troubleshooting, or see the full Usenet glossary.

Put it into practice with the world's best usenet service