Ask Your Question

What is the best way to find out what is causing TCP acked unseen segment.

asked 2018-11-15 13:38:41 +0000

this post is marked as community wiki

This post is a wiki. Anyone with karma >750 is welcome to improve it.

I am try to find the cause of slow receipt printing, I have several captures from the server side looking at the clients having the issue. On all the captures I see TCP acked unseen segment, this application talks to several servers I was told the one I am looking at would be the best one to capture the conversation for the receipt print application.

edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted

answered 2018-11-15 16:09:00 +0000

NJL gravatar image

TCP Acked Unseen segment is Wiresharks way of informing you that in the capture you see ACKs for packets that were not seen by Wireshark i.e. they are not in the capture, but the data has been received by the sender of the ACKs.

The typical cause for this is a poor capture. I'd guess that the server where you're capturing is not capable of capturing all packets to/from the server.

Provided you can do the capture yourself, you can try to use capture filters, packet truncation or other ways of lowering the amount of data you must capture.

Then I'm sure these false positives will disappear.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower


Asked: 2018-11-15 13:38:41 +0000

Seen: 15,980 times

Last updated: Nov 15 '18