WireShark Packet Analysis (2 files, client to server, 1 worked, other failed - why?

We have an internal business website. I have 2 packet captures, one 417 pkts, the other 581 pkts. They recorded packets for about 1-2 minutes of traffic, to 1 specific IP/Server only. I have basic WireShark skills, no advanced troubleshooting or experience with the product...hence this project! I am trying to see why the one with 417 packets FAILS to initiate http/java/page/forms And why the 581 packets WORKS to initiate the http/java/page/forms - am trying to ID the differences, learn where in the packet captures they are different, understand why they are different, discover/learn the "root cause or root problem" and develop steps of how to resolve...TROUBLESHOOT and hopefully correct the problem =) possible problems: (java, http, https, ssl failures, ttl or packet delays, latency, client to server failures, server to client failures, etc.) SCENARIO 2 servers, 1 works fine, other does not The one that fails, about 70-80% of the time, user clicks on desktop shortcut to URL which is an internal link, goes to the server which ultimately fails to load subsequent pages. User receive the initial web page for login, provides user credentials and logs in - all is fine - this works all the time. Login is successful. NOW: Problem is when the next link is clicked, this is what fails about 70-80% of the time to load properly. It wont load, citing "forms" and failures most of the time. The packet captures are both, 1 session that I captured that worked - 1 session that failed. Both I immediately logged out/off of and stopped packet captures. Therefore, trying to learn how to distinguish the differences between the 2 captures. ID what is in one, thats not in the other. Why one capture, the session worked fine - but in the other, it failed to work. Identify the differences, learn/understand them and how to find them, develop some additional steps and recommendations to remedy/correct the problem. Any helpers available? Any recommendations? Thanks! PS I "think" I found the differences/problem - but I dont understand what is happening and why, or how to resolve. Attached are some sample packets which "i think" might be the root cause...just not able to confirm [login to view URL] = working session, web page loads, no problems [login to view URL] = broken, not working session - different results, Info of Encrypted Alerts, HTTPS FIN/ACKs, etc.