Seeing TCP out of order in the outgoing packets

asked 2019-03-19 15:23:25 +0000

Wireshark_newbie gravatar image


I am new to wireshark and request anyone to kindly help or throw some light into what I am looking at.

I capturing at server end. I am seeing a lot of packets marked as tcp out of order in wireshark. These packets are outgoing packets from server to client.

Is it normal? I thought TCP out of order packets are usually seen for incoming packets.

Thank you

edit retag flag offensive close merge delete


How are you actually capturing; on the server itself, via a mirror\span port or with a tap?

grahamb gravatar imagegrahamb ( 2019-03-19 15:59:25 +0000 )edit

We are using citrix netscalar packet trace feature on the server to capture packets and later opening the captured trace file in wireshark for analysis

Wireshark_newbie gravatar imageWireshark_newbie ( 2019-03-19 16:03:57 +0000 )edit

Can you capture elsewhere to eliminate the Netscaler capture as the issue?

grahamb gravatar imagegrahamb ( 2019-03-19 16:12:59 +0000 )edit

Okay. I will check and see if netscalar capture is the issue. Thank you.

Wireshark_newbie gravatar imageWireshark_newbie ( 2019-03-19 16:18:09 +0000 )edit

I am seeing this too. Using tcpdump on an AIX box.

dmc66 gravatar imagedmc66 ( 2020-06-03 20:10:46 +0000 )edit