Wireshark-bugs: [Wireshark-bugs] [Bug 1725] New: Enhance tcp-analysis with "reused tcp session"
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Sat, 4 Aug 2007 07:21:57 +0000 (GMT)
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1725

           Summary: Enhance tcp-analysis with "reused tcp session"
           Product: Wireshark
           Version: SVN
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Enhancement
          Priority: Low
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: sake@xxxxxxxxxx


Build Information:
n/a
--
When a new tcp-session is using the same ips and ports as a previous
tcp-session, it is currently marked as "Lost Packet". This patch adds another
seq-analysis-flag to mark these frames as "Reused Session".

Background info:
F5 loadbalancers (amongst others) try to preserve the client-ports when
forwarding traffic to the backend servers. If you also enable source-natting,
there is a high chance that you end up having multiple tcp-sessions with the
same ips and ports in one trace-file. This gives wrong statistics for "lost
packets".


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.