What does this tcptrace mean

retag add tags

image description The little black I-beams represent TCP data segments.How is it possible, the mean that TCP data segments less ? I found the seq over 32bit,maybe it is reason.but The little black I-beams is TCP data segments. Whaterver,it make me puzzled

zhuwei

asked 2020-09-06 11:28:42 +0000

edit flag offensive 0 remove flag close merge delete

Comments

You happened to catch the sequence number wrapping around.
What version of Wireshark is this? Would you prefer that the graph be shifted above zero?

1   4294960316          
2   4294961764  1448        
3   4294963212  1448        
4   4294964660  1448        
5   4294966108  1448        
6   260 -4294965848 4294967296  1448
7   1708    1448        
8   3156    1448

There is a sample trace attached to this email showing sequence wrap.

Chuckc (2020-09-06 15:42:23 +0000) edit

3.2.6 window 64 bti. I think the little black I-beams of graph should raise，not drop

zhuwei (2020-09-06 17:51:54 +0000) edit

Can you zoom in to an area that shows this and add another image?

Chuckc (2020-09-06 18:23:57 +0000) edit

Yes.so I should add which image？

zhuwei (2020-09-07 03:54:10 +0000) edit

The black I-beams that don't seem correct.

Chuckc (2020-09-07 13:11:08 +0000) edit

add a comment see more comments

What does this tcptrace mean edit

Comments

Be the first one to answer this question!

What does this tcptrace mean