Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

What is this TCP error telling me?

I'm trying to connect to a game server using port 5555 but it's having issues and I'd like to find out what's causing the problem. I get TCP Retransmissions in Wireshark, but I don't know what they mean. I'm hoping someone here could give me a quick answer. Here is the data of the packet.

Thanks.

Frame 305331: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) on interface \Device\NPF_{78344E59-C372-4D54-900B-BE42F3EC5985}, id 0
    Interface id: 0 (\Device\NPF_{78344E59-C372-4D54-900B-BE42F3EC5985})
        Interface name: \Device\NPF_{78344E59-C372-4D54-900B-BE42F3EC5985}
        Interface description: Ethernet
    Encapsulation type: Ethernet (1)
    Arrival Time: May 21, 2020 18:48:17.416156000 GMT Summer Time
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1590083297.416156000 seconds
    [Time delta from previous captured frame: 0.008649000 seconds]
    [Time delta from previous displayed frame: 8.000461000 seconds]
    [Time since reference or first frame: 445.970354000 seconds]
    Frame Number: 305331
    Frame Length: 66 bytes (528 bits)
    Capture Length: 66 bytes (528 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth:ethertype:ip:tcp]
    [Coloring Rule Name: Bad TCP]
    [Coloring Rule String: tcp.analysis.flags && !tcp.analysis.window_update]
Ethernet II, Src: Micro-St_f7:4f:2a (4c:cc:6a:f7:4f:2a), Dst: Technico_aa:8e:62 (e0:b9:e5:aa:8e:62)
    Destination: Technico_aa:8e:62 (e0:b9:e5:aa:8e:62)
        Address: Technico_aa:8e:62 (e0:b9:e5:aa:8e:62)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: Micro-St_f7:4f:2a (4c:cc:6a:f7:4f:2a)
        Address: Micro-St_f7:4f:2a (4c:cc:6a:f7:4f:2a)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Type: IPv4 (0x0800)
Internet Protocol Version 4, Src: 192.168.1.55, Dst: 54.72.75.192
    0100 .... = Version: 4
    .... 0101 = Header Length: 20 bytes (5)
    Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
        0000 00.. = Differentiated Services Codepoint: Default (0)
        .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
    Total Length: 52
    Identification: 0x00e9 (233)
    Flags: 0x4000, Don't fragment
        0... .... .... .... = Reserved bit: Not set
        .1.. .... .... .... = Don't fragment: Set
        ..0. .... .... .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (6)
    Header checksum: 0x0000 [validation disabled]
    [Header checksum status: Unverified]
    Source: 192.168.1.55
    Destination: 54.72.75.192

Transmission Control Protocol, Src Port: 52488, Dst Port: 5555, Seq: 0, Len: 0
    Source Port: 52488
    Destination Port: 5555
    [Stream index: 82]
    [TCP Segment Len: 0]
    Sequence number: 0    (relative sequence number)
    Sequence number (raw): 169458021
    [Next sequence number: 1    (relative sequence number)]
    Acknowledgment number: 0
    Acknowledgment number (raw): 0
    1000 .... = Header Length: 32 bytes (8)
    Flags: 0x002 (SYN)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...0 .... = Acknowledgment: Not set
        .... .... 0... = Push: Not set
        .... .... .0.. = Reset: Not set
        .... .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish request (SYN): server port 5555]
                [Connection establish request (SYN): server port 5555]
                [Severity level: Chat]
                [Group: Sequence]
        .... .... ...0 = Fin: Not set
        [TCP Flags: ··········S·]
    Window size value: 64240
    [Calculated window size: 64240]
    Checksum: 0x440e [unverified]
    [Checksum Status: Unverified]
    Urgent pointer: 0
    Options: (12 bytes), Maximum segment size, No-Operation (NOP), Window scale, No-Operation (NOP), No-Operation (NOP), SACK permitted
        TCP Option - Maximum segment size: 1460 bytes
            Kind: Maximum Segment Size (2)
            Length: 4
            MSS Value: 1460
        TCP Option - No-Operation (NOP)
            Kind: No-Operation (1)
        TCP Option - Window scale: 8 (multiply by 256)
            Kind: Window Scale (3)
            Length: 3
            Shift count: 8
            [Multiplier: 256]
        TCP Option - No-Operation (NOP)
            Kind: No-Operation (1)
        TCP Option - No-Operation (NOP)
            Kind: No-Operation (1)
        TCP Option - SACK permitted
            Kind: SACK Permitted (4)
            Length: 2
    [SEQ/ACK analysis]
        [TCP Analysis Flags]
            [Expert Info (Note/Sequence): This frame is a (suspected) retransmission]
                [This frame is a (suspected) retransmission]
                [Severity level: Note]
                [Group: Sequence]
            [The RTO for this segment was: 15.002601000 seconds]
            [RTO based on delta from frame: 295079]
    [Timestamps]
        [Time since first frame in this TCP stream: 15.002601000 seconds]
        [Time since previous frame in this TCP stream: 8.000461000 seconds]