UDP packet unique ID

asked 2024-05-09 15:46:39 +0000

AL gravatar image

I think I already know the answer to this.

I suspect some UDP packets are being dropped. I have taken capture from client and server side, as UDP is connection less - it may not have a unqiue ID to trace the packet on both client and server side.

How is the best way in Wireshark to see a UDP packet sent from my client to the server in both traces

edit retag flag offensive close merge delete

Comments

Is the udp.checksum or enabling MD5 Hash on frame protocol a unique identifier?
If so you could combine the captures and search for the missing ones in Wireshark or extract the fields with tshark and compare the lists.

Chuckc gravatar imageChuckc ( 2024-05-10 03:58:56 +0000 )edit

For chasing loss like this I usually start with ip.id field and compare at source and destination. Does not always work, but it does often enough to be useful.

Bob Jones gravatar imageBob Jones ( 2024-05-10 12:16:59 +0000 )edit
add a comment