Root cause analysis for long-lived TCP connections