time sequence(tcp trace)

asked 2018-11-28 08:13:42 +0000

this post is marked as community wiki

This post is a wiki. Anyone with karma >750 is welcome to improve it.

Hi , I am a newbie

Recently I learning the time sequence (tcptrace)

Why one of the segment blocks of the SACK option field will be removed without being confirmed ?

SACK's segment block should be removed after the missing segment is confirmed.

However, in the following case, when the sender loses the packet again, the segment block of the SACK option is one less segment.

Please help answer , thank you so much

Packet Details


edit retag flag offensive close merge delete


Could you show the picture to look at? And which part is confusing you.

Packet_vlad gravatar imagePacket_vlad ( 2018-11-28 09:34:36 +0000 )edit