UDP packet unique ID

  • retag add tags

I think I already know the answer to this.

I suspect some UDP packets are being dropped. I have taken capture from client and server side, as UDP is connection less - it may not have a unqiue ID to trace the packet on both client and server side.

How is the best way in Wireshark to see a UDP packet sent from my client to the server in both traces

AL's avatar
3
AL
asked 2024-05-09 15:46:39 +0000
edit flag offensive 0 remove flag close merge delete

Comments

Is the udp.checksum or enabling MD5 Hash on frame protocol a unique identifier?
If so you could combine the captures and search for the missing ones in Wireshark or extract the fields with tshark and compare the lists.

Chuckc's avatar Chuckc (2024-05-10 03:58:56 +0000) edit
more
  • delete

For chasing loss like this I usually start with ip.id field and compare at source and destination. Does not always work, but it does often enough to be useful.

Bob Jones's avatar Bob Jones (2024-05-10 12:16:59 +0000) edit
more
  • delete
add a comment see more comments