Wireshark · Wireshark-users: Re: [Wireshark-users] Query regarding Wireshark

[Andrew Hood <ajhood@xxxxxxxxx>]

Martin Visser wrote:
> Hmmm, obviously even on a multi-core machine the network drivers must be
> able to present packets to the OS network stack in the order on the wire.
> What mechanism allows libpcap to do thing in a different order. If what you
> are saying is correct, that has to be a major issue in libpcap?

TCP traffic is allowed to arrive out of order. The OS stack will
reassemble it in the correct order.

With other traffic it has always been the application's problem to deal
with out of order data. The OS stack may have to deal with reassembling
fragments.

Andrew
-- 
There's no point in being grown up if you can't be childish sometimes.
                -- Dr. Who