Ask Your Question
0

how does wireshark identify two or three packets that belong the same tcp segment

asked 2018-06-05 15:21:03 +0000

bianmingkai gravatar image

Hi how does wireshark identify two or three packets that belong the same tcp segment . thanks

edit retag flag offensive close merge delete
add a comment

2 Answers

Sort by ยป oldest newest most voted
1

answered 2018-06-05 17:27:21 +0000

Jaap gravatar image

It follows this reassembly process, thereby constructing the original TCP packet, to be handed of to the TCP dissector.

edit flag offensive delete link more

Comments

See also RFC 791, in particular the information and discussions around fragmentation.

cmaynard gravatar imagecmaynard ( 2018-06-05 20:30:03 +0000 )edit
add a comment
0

answered 2018-06-05 23:40:13 +0000

Guy Harris gravatar image

See my answer to the same question, asked as a comment on the answer to this question.

edit flag offensive delete link more
add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

subscribe to rss feed

Stats

Asked: 2018-06-05 15:21:03 +0000

Seen: 244 times

Last updated: Jun 05 '18