Wireshark-bugs: [Wireshark-bugs] [Bug 10766] New: 1.12.12 inconsistent with out-of-order and ret
| Bug ID |
10766
|
| Summary |
1.12.12 inconsistent with out-of-order and retransmission classification
|
| Product |
Wireshark
|
| Version |
1.12.1
|
| Hardware |
x86
|
| OS |
Windows 7
|
| Status |
UNCONFIRMED
|
| Severity |
Major
|
| Priority |
Low
|
| Component |
Dissection engine (libwireshark)
|
| Assignee |
bugzilla-admin@wireshark.org
|
| Reporter |
a11en1ee@pacbell.net
|
Build Information:
Version 1.12.2 (v1.12.2-0-g898fa22 from master-1.12)
--
I manually analyzed a PCAP file because discrepancies with the Wireshark expert
info between versions 1.12.12 vs 1.10.11. What I discovered is Wireshark
1.12.12 was inconsistent with is classification of out-of-order and
retransmission packets. Technically, the packet is out-of-order and
retransmission, but my preference is classify it out-of-order only if it is the
first time the packet is observed and subsequent packets as retransmission.
Because this is my customer data I am not going to upload the PCAP.
1.12.2 build
packet 1775 seq 3096067058 tcp.len=1260
packet 1776 seq 3986068318 tcp.len=1260
packet 1834 seq 3096067058 tcp.len=1260, Wireshark expert info - out of order
Save the 1775-1834 in a separate PCAP file, 1.12.2 reported the packet as
retransmission. The original file has 193359 packets and smaller only has 60
packets.
1.10.11 build
packet 1775 seq 3096067058 tcp.len=1260
packet 1776 seq 3986068318 tcp.len=1260
packet 1834 seq 3096067058 tcp.len=1260, Wireshark expert info – retransmission
You are receiving this mail because:
- You are watching all bug changes.
