Ask Your Question

Revision history [back]

TCP reassembly > How does Wireshark handle missing segments?

Hi, Would like to ask a generic question, whether anyone investigated how Wireshark ressembles TCP, in particular how it handles situations where there are missing segments in the middle of a tcp session? Does it patch in missing bytes or ignore the entire segment?

Thanks!