Ask Your Question

Revision history [back]

Only the frames that are partial PDU's are marked in this way, e.g. frame 7. When reassembly has completed, er.g. frame 8, then no such marking takes place.

If you look at frame 8 in the packet details, between the TCP and TLS layers you can see the segments that are reassembled in this frame:

Frame 8: 402 bytes on wire (3216 bits), 402 bytes captured (3216 bits) on interface \Device\NPF_{3F560570-D567-4C53-9A5F-FE68D01A1524}, id 0
Ethernet II, Src: 12:34:56:78:9a:bc (12:34:56:78:9a:bc), Dst: Microsof_8a:18:50 (00:0d:3a:8a:18:50)
Internet Protocol Version 4, Src: edge-star-mini-shv-01-syd2.facebook.com (157.240.8.35), Dst: 10.0.4.4 (10.0.4.4)
Transmission Control Protocol, Src Port: 443, Dst Port: 51808, Seq: 2801, Ack: 518, Len: 348
[2 Reassembled TCP Segments (471 bytes): #7(123), #8(348)]
Transport Layer Security

Only the frames that are partial PDU's are marked in this way, e.g. frame 7. When reassembly has completed, er.g. e.g. frame 8, then no such marking takes place.

If you look at frame 8 in the packet details, between the TCP and TLS layers you can see the segments that are reassembled in this frame:

Frame 8: 402 bytes on wire (3216 bits), 402 bytes captured (3216 bits) on interface \Device\NPF_{3F560570-D567-4C53-9A5F-FE68D01A1524}, id 0
...
Ethernet II, Src: 12:34:56:78:9a:bc (12:34:56:78:9a:bc), Dst: Microsof_8a:18:50 (00:0d:3a:8a:18:50)
...
Internet Protocol Version 4, Src: edge-star-mini-shv-01-syd2.facebook.com (157.240.8.35), Dst: 10.0.4.4 (10.0.4.4)
...
Transmission Control Protocol, Src Port: 443, Dst Port: 51808, Seq: 2801, Ack: 518, Len: 348
...
[2 Reassembled TCP Segments (471 bytes): #7(123), #8(348)]
Transport Layer Security