 | 1 | initial version |
TCP Acked Unseen segment is Wiresharks way of informing you that in the capture you see ACKs for packets that were not seen by Wireshark i.e. they are not in the capture, but the data has been received by the sender of the ACKs.
The typical cause for this is a poor capture. I'd guess that the server where you're capturing is not capable of capturing all packets to/from the server.
Provided you can do the capture yourself, you can try to use capture filters, packet truncation or other ways of lowering the amount of data you must capture.
Then I'm sure these false positives will disappear.
