What does this tcptrace mean

asked 2020-09-06 11:28:42 +0000

zhuwei gravatar image

image description The little black I-beams represent TCP data segments.How is it possible, the mean that TCP data segments less ? image description I found the seq over 32bit,maybe it is reason.but The little black I-beams is TCP data segments. Whaterver,it make me puzzled

edit retag flag offensive close merge delete

Comments

You happened to catch the sequence number wrapping around.
What version of Wireshark is this? Would you prefer that the graph be shifted above zero?

1   4294960316          
2   4294961764  1448        
3   4294963212  1448        
4   4294964660  1448        
5   4294966108  1448        
6   260 -4294965848 4294967296  1448
7   1708    1448        
8   3156    1448

There is a sample trace attached to this email showing sequence wrap.

Chuckc gravatar imageChuckc ( 2020-09-06 15:42:23 +0000 )edit

3.2.6 window 64 bti. I think the little black I-beams of graph should raise,not drop

zhuwei gravatar imagezhuwei ( 2020-09-06 17:51:54 +0000 )edit

Can you zoom in to an area that shows this and add another image?

Chuckc gravatar imageChuckc ( 2020-09-06 18:23:57 +0000 )edit

Yes.so I should add which image?

zhuwei gravatar imagezhuwei ( 2020-09-07 03:54:10 +0000 )edit

The black I-beams that don't seem correct.

Chuckc gravatar imageChuckc ( 2020-09-07 13:11:08 +0000 )edit