THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
Ask Your Question

Revision history  [back]

Revision 2
Packet_vlad's avatar
1.1k
Packet_vlad
updated 2019-05-15 06:29:52 +0000

If packet's Sequence Number and Next Sequence Number are equal that means the packet contains no data (TCP segment length = 0) in other words this is "pure ACK".

If you see such packet somewhere in the middle of a trace - this is unidirectional data transfer.

Keep in mind also 1 is not absolute Seq.n, but relative. If you want to spot real Seq.n you have to disable Relative Sequence numbers option in TCP dissector.

Revision 1
Packet_vlad's avatar
1.1k
Packet_vlad
answered 2019-05-15 06:26:01 +0000

If packet's Sequence Number and Next Sequence Number are equal that means the packet contains no data (TCP segment length = 0) in other words this is "pure ACK".

If you see such packet somewhere in the middle of a trace - this is unidirectional data transfer.

Keep in mind also 1 is not absolute Seq.n, but relative. If you want to spot real Seq.n you have to disable Relative Sequence numbers option in TCP dissector.