TCP reassembly > How does Wireshark handle missing segments?

asked 2020-06-06 10:38:26 +0000

Giddee gravatar image

Hi, Would like to ask a generic question, whether anyone investigated how Wireshark ressembles TCP, in particular how it handles situations where there are missing segments in the middle of a tcp session? Does it patch in missing bytes or ignore the entire segment?

Thanks!

edit retag flag offensive close merge delete
add a comment