Ethereal-users: Re: [Ethereal-users] out of order packets

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Guy Harris" <gharris@xxxxxxxxx>
Date: Thu, 18 May 2006 11:58:39 -0700 (PDT)
Peter Bruno wrote:
> If packets are recieved out of order (determined by
> looking at the IP Identification),

Or, presumably, by looking at the TCP sequence number...

> they are flagged as
> 'TCP Previous segment lost' and then the next packet
> as 'TCP Fast Retransmission'.
>
> Is it possible to disable this part of the TCP
> analysis without having to turn off all analysis?

Not as far as I know - but the TCP analysis should handle OOO packets
correctly.  For example, "TCP Previous segment lost" should perhaps be
"TCP Previous segment lost or out of order".

Ronnie, when did the rewritten TCP analysis go in, and did it fix these
problems?


_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users