Revision history [back]
TCP Analysis questions
Hi experts,
For the TCP Analysis , I have the following questions :
https://www.wireshark.org/docs/wsug_html_chunked/ChAdvTCPAnalysis.html
Next expected sequence number
The last-seen sequence number plus segment length. Set when there are no analysis flags and for zero window probes. This is initially zero and calculated based on the previous packet in the same TCP flow. Note that this may not be the same as the tcp.nxtseq protocol field.
1.What's the difference between "Next expected sequence number" and "Next sequence number"?
Next sequence number : tcp.nxtseq = tcp.seq + tcp.len
Next expected sequence number : ?
2.What's the meaning of the "Set when there are no analysis flags and for zero window probes." ?
3.What's the meaning of the "Note that this may not be the same as the tcp.nxtseq protocol field."?In what situation would this happen?
Next expected acknowledgement number
The last-seen sequence number for segments. Set when there are no analysis flags and for zero window probes.
4.Next expected acknowledgement number : tcp.ack ?
Last-seen acknowledgment number
Always set. Note that this is not the same as the next expected acknowledgment number.
Last-seen acknowledgment number
Always updated for each packet. Note that this is not the same as the next expected acknowledgment number.
5.What's the difference between the two?
Regards, 7ACE
TCP Analysis questions
Hi experts,
For the TCP Analysis , I have the following questions :
https://www.wireshark.org/docs/wsug_html_chunked/ChAdvTCPAnalysis.html
Next expected sequence number
The last-seen sequence number plus segment length. Set when there are no analysis flags and for zero window probes. This is initially zero and calculated based on the previous packet in the same TCP flow. Note that this may not be the same as the tcp.nxtseq protocol field.
1.What's the difference between "Next expected sequence number" and "Next sequence number"?
Next sequence number : tcp.nxtseq = tcp.seq + tcp.len
Next expected sequence number : ?
2.What's the meaning of the "Set when there are no analysis flags and for zero window probes." ?
3.What's the meaning of the "Note that this may not be the same as the tcp.nxtseq protocol field."?In what situation would this happen?field."?
Next expected acknowledgement number
The last-seen sequence number for segments. Set when there are no analysis flags and for zero window probes.
4.Next expected acknowledgement number : tcp.ack ?
Last-seen acknowledgment number
Always set. Note that this is not the same as the next expected acknowledgment number.
Last-seen acknowledgment number
Always updated for each packet. Note that this is not the same as the next expected acknowledgment number.
5.What's the difference between the two?
Regards, 7ACE
TCP Analysis questions
Hi experts,
For the TCP Analysis , I have the following questions :
https://www.wireshark.org/docs/wsug_html_chunked/ChAdvTCPAnalysis.html
Next expected sequence number
The last-seen sequence number plus segment length. Set when there are no analysis flags and for zero window probes. This is initially zero and calculated based on the previous packet in the same TCP flow. Note that this may not be the same as the tcp.nxtseq protocol field.
1.What's the difference between "Next expected sequence number" and "Next sequence number"?
Next sequence
numbernumber** : tcp.nxtseq = tcp.seq + tcp.lenNext expected sequence
numbernumber** : ?
2.What's the meaning of the "Set when there are no analysis flags and for zero window probes." ?
3.What's the meaning of the "Note that this may not be the same as the tcp.nxtseq protocol field."?
Next expected acknowledgement number
The last-seen sequence number for segments. Set when there are no analysis flags and for zero window probes.
4.Next expected acknowledgement number : tcp.ack ?
Last-seen acknowledgment number
Always set. Note that this is not the same as the next expected acknowledgment number.
Last-seen acknowledgment number
Always updated for each packet. Note that this is not the same as the next expected acknowledgment number.
5.What's the difference between the two?
Regards, 7ACE
TCP Analysis questions
Hi experts,
For the TCP Analysis , I have the following questions :
https://www.wireshark.org/docs/wsug_html_chunked/ChAdvTCPAnalysis.html
Next expected sequence 1.What's the difference between "Next expected sequence number" and "Next sequence number"?
Next sequence number
Next sequence number**
Next expected sequence number
Next expected sequence number**
2.What's the meaning of the "Set when there are no analysis flags and for zero window probes." ?
3.What's the meaning of the "Note that this may not be the same as the tcp.nxtseq protocol field."?
Next expected acknowledgement 4.Next expected acknowledgement number : tcp.ack tcp.ack ?
Last-seen acknowledgment 5.What's the difference between the two?
Regards, 7ACE