FYI: Bug 1847 submitted:
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1847
The subject I gave it was "TCP Duplicate ACK's not being marked as such
in "Expert Info".", but I realized afterwards that that might be
somewhat confusing. Although that does occur, I think the root of the
problem is that the PSH flag is incorrectly being taken into account
when determining a duplicate ACK or not.
Anyway, I tried to explain the situation as best as I could in the bug
report and included a small capture file with my own explanation of what
I believe is going on. Hopefully things are clear enough. I can post
additional captures if needed.
- Chris
-----------------------------------------
This email may contain confidential and privileged material for the
sole use of the intended recipient(s). Any review, use, retention,
distribution or disclosure by others is strictly prohibited. If you
are not the intended recipient (or authorized to receive for the
recipient), please contact the sender by reply email and delete all
copies of this message. Also, email is susceptible to data
corruption, interception, tampering, unauthorized amendment and
viruses. We only send and receive emails on the basis that we are
not liable for any such corruption, interception, tampering,
amendment or viruses or any consequence thereof.
