Hi experts,
For the TCP Analysis , Why isn't packet No.6 marked with "TCP ACKed unseen segment"?But in v4.4.0, even 4.0.x is normal.
pcapng: https://drive.google.com/file/d/1Q4cDmOqVid2ze3tau7yhnFyMBkESyKXQ/view?usp=drivesdk
No. Time Source Destination Protocol Length Info
1 0 192.168.1.1 10.10.10.10 TCP 636 7930 > 80 [PSH, ACK] Seq=1 Ack=1 Win=65535 Len=582[Packet size limited during capture]
2 0.000034 10.10.10.10 192.168.1.1 TCP 60 80 > 7930 [ACK] Seq=1 Ack=583 Win=6984 Len=0[Packet size limited during capture]
3 0.084748 10.10.10.10 192.168.1.1 TCP 1254 80 > 7930 [ACK] Seq=1 Ack=583 Win=6984 Len=1200[Packet size limited during capture]
4 0.084857 10.10.10.10 192.168.1.1 TCP 1254 80 > 7930 [ACK] Seq=1201 Ack=583 Win=6984 Len=1200[Packet size limited during capture]
5 0.12227 10.10.10.10 192.168.1.1 TCP 1254 [TCP Previous segment not captured] 80 > 7930 [ACK] Seq=4801 Ack=583 Win=6984 Len=1200[Packet size limited during capture]
6 0.156074 192.168.1.1 10.10.10.10 TCP 60 7930 > 80 [ACK] Seq=583 Ack=6001 Win=65535 Len=0[Packet size limited during capture]
7 0.156763 10.10.10.10 192.168.1.1 TCP 1254 80 > 7930 [ACK] Seq=6001 Ack=583 Win=6984 Len=1200[Packet size limited during capture]
8 0.156865 10.10.10.10 192.168.1.1 TCP 1254 80 > 7930 [ACK] Seq=7201 Ack=583 Win=6984
Len=1200[Packet size limited during capture]
Version 4.2.4 (v4.2.4-0-g1fe5bce8d665).
Compiled (64-bit) using Microsoft Visual Studio 2022 (VC++ 14.37, build 32822),
with GLib 2.78.0, with Qt 6.5.3, with libpcap, with zlib 1.3.0, with PCRE2, with
Lua 5.2.4 (with UfW patches), with GnuTLS 3.8.3 and PKCS #11 support, with
Gcrypt 1.10.2-unknown, with Kerberos (MIT), with MaxMind, with nghttp2 1.57.0,
with nghttp3 1.0.0, with brotli, with LZ4, with Zstandard, with Snappy, with
libxml2 2.11.5, with libsmi 0.5.0, with QtMultimedia, with automatic updates
using WinSparkle 0.8.0, with AirPcap, with Minizip, with binary plugins.
Running on 64-bit Windows 10 (1809), build 17763, with Intel(R) Xeon(R) Gold
6226R CPU @ 2.90GHz (with SSE4.2), with 32767 MB of physical memory, with GLib
2.78.0, with Qt 6.5.3, with Npcap version 1.79, based on libpcap version 1.10.4,
with PCRE2 10.42 2022-12-11, with c-ares 1.27.0, with GnuTLS 3.8.3, with Gcrypt
1.10.2-unknown, with nghttp2 1.57.0, with nghttp3 1.0.0, with brotli 1.0.9, with
LZ4 1.9.3, with Zstandard 1.5.2, without AirPcap, with light display mode,
without HiDPI, with QPA plugin "windows", with LC_TYPE=Chinese
(Simplified)_China.utf8, binary plugins supported.
Regards, 7ACE