The nstrace utility is the native packet capture tool on the Citrix ADC, designed for in-depth network-level troubleshooting. When users experience connection resets (TCP RST), a packet trace is the most effective method to determine the source and cause. The administrator can use nstrace to capture the traffic flow between the client, the ADC, and the backend server. The resulting capture file can then be analyzed in Wireshark to identify which device is sending the TCP reset packet and under what circumstances, directly addressing the root cause of the issue.

A. View the newnslog from the command line interface (CLI) to look for packet resets from the Citrix ADC.

The newnslog file records system-level events, configuration changes, and feature-specific logs, not granular packet-level details like individual TCP resets for user sessions.

B. Use the nslog to look for packet resets on the Citrix ADC.

Similar to newnslog, the general nslog is an event log. It is not designed for packet-level analysis and would not contain the necessary detail to diagnose a TCP reset.

D. Look in the event viewer for packet resets from the Citrix ADC.

"Event viewer" is a term for the Windows logging utility. The Citrix ADC does not have a tool with this name; its equivalent logs are not suitable for this task.

1. Citrix ADC Product Documentation. (2023). nstrace utility.

Section: "nstrace utility"

Content: "You can use the nstrace utility to get a dump of packets received and sent by the Citrix ADC appliance... You can view the trace details in the Wireshark application." This confirms nstrace is the designated tool for packet capture and analysis with Wireshark.

2. Citrix ADC Product Documentation. (2023). Troubleshooting Citrix ADC.

Section: "Tools for Troubleshooting"

Content: The documentation lists nstrace as a primary tool for debugging network issues. It explicitly states

"For debugging network related issues

you can use the nstrace command to capture packets on the Citrix ADC appliance."

3. Citrix ADC Product Documentation. (2023). Auditing Citrix ADC logs.

Section: "Log formats and log messages"

Content: This section describes the contents of the newnslog file

detailing that it contains information on system events

commands executed

and security events. It does not mention logging individual TCP packets or resets

confirming it is not the correct tool for this scenario.