retransmission the incorrect seq

the wireshark caputure image link

please explain why the retransmisstion begin with seq 9388, it was weird.

GoBook's avatar
1
GoBook
asked 2019-08-22 04:57:57 +0000
edit flag offensive 0 remove flag close merge delete

Comments

There are more weird things in this capture, but helping you analyze this issue is not really because:

  • The capture was made on the webserver which has TCP segmentation offloading on. This means the packets in the trace are not exactly the packets on the network.
  • You provided a screenshot instead of a capture file, this means most of the interesting fields are not available.

Could you please make another capture on a span-port towards the server? Anonimize it with TraceWrangler and then post it on a public fileshare like DropBox, OneDrive, etc for us to have a look at?

SYN-bit's avatar SYN-bit (2019-08-23 07:49:26 +0000) edit
add a comment see more comments