2025-02-25 05:04:55 +0000 | commented question | v4.4.4 Wireshark crashes Thank you for the explanation. |
2025-02-25 01:33:48 +0000 | asked a question | v4.4.4 Wireshark crashes v4.4.4 Wireshark crashes Hi experts, When using Wireshark to sort packets, the program crashes. Is this because the pro |
2025-02-18 21:48:09 +0000 | received badge | ● Famous Question (source) |
2024-09-06 07:28:13 +0000 | marked best answer | v4.2.x TCP ACKed unseen segment Hi experts, For the TCP Analysis , Why isn't packet No.6 marked with "TCP ACKed unseen segment"?But in v4.4.0, even 4.0.x is normal. pcapng: https://drive.google.com/file/d/1Q4cD... (more) |
2024-09-05 23:47:58 +0000 | commented answer | v4.2.x TCP ACKed unseen segment Thanks to all for your help and patience. |
2024-09-05 13:09:06 +0000 | commented answer | v4.2.x TCP ACKed unseen segment Thanks for your answer. 4.2.7 still have the same problem. |
2024-09-04 00:07:59 +0000 | edited question | v4.2.x TCP ACKed unseen segment v4.2.x TCP ACKed unseen segment Hi experts, For the TCP Analysis , Why isn't packet No.6 marked with "TCP ACKed unseen |
2024-09-04 00:06:30 +0000 | asked a question | v4.2.x TCP ACKed unseen segment v4.2.x TCP ACKed unseen segment Hi experts, For the TCP Analysis , Why isn't packet No.6 marked with "TCP ACKed unseen |
2024-09-03 03:15:50 +0000 | received badge | ● Popular Question (source) |
2024-07-11 00:30:51 +0000 | marked best answer | nextseq and nextseqtime Hi experts, What is nextseq and nextseqtime? Is the nextseqtime an estimated value or a real value? The relevant code: Regards, 7ACE |
2024-07-11 00:25:38 +0000 | marked best answer | TCP Analysis questions Hi experts, For the TCP Analysis , I have the following questions : https://www.wireshark.org/docs/wsug_h...
1.What's the difference between "Next expected sequence number" and "Next sequence number"?
2.What's the meaning of the "Set when there are no analysis flags and for zero window probes." ? 3.What's the meaning of the "Note that this may not be the same as the tcp.nxtseq protocol field."?In what situation would this happen?
4.Next expected acknowledgement number : tcp.ack ?
5.What's the difference between the two? Regards, 7ACE |
2024-07-11 00:24:19 +0000 | received badge | ● Famous Question (source) |
2024-07-05 13:25:59 +0000 | commented answer | nextseq and nextseqtime So does nextseq refer to the NextSeqNum of the current packet, while tcpd->fwd->tcp_analyze_seq_info->nextseq r |
2024-07-05 09:18:59 +0000 | edited question | nextseq and nextseqtime nextseq and nextseqtime Hi experts, What is nextseq and nextseqtime? Is the nextseqtime an estimated value or a real va |
2024-07-05 09:17:21 +0000 | edited question | nextseq and nextseqtime nextseqtime Hi experts, What is nextseqtime? Is it an estimated value or a real value? No.1 SeqNum 1 NextSeq 1449 |
2024-07-05 08:51:15 +0000 | asked a question | nextseq and nextseqtime nextseqtime Hi experts, What is nextseqtime? Is it an estimated value or a real value? No.1 SeqNum 1 NextSeq 1449 |
2024-07-05 08:28:44 +0000 | received badge | ● Notable Question (source) |
2024-04-25 21:09:43 +0000 | received badge | ● Popular Question (source) |
2024-04-18 12:15:53 +0000 | marked best answer | TCP Port numbers reused Hi experts, For the pcap, SYN、SYN/ACK、RST、SYN、SYN/ACK、RST, When I ignore the No.4 SYN packet,Why is packet No.2 marked with The relevant code: Regards, 7ACE |
2024-04-18 12:15:43 +0000 | commented answer | TCP Port numbers reused Thank you for the explanation. |
2024-04-16 14:48:35 +0000 | commented answer | Why would wireshark on one PC capture LLDP packets and another not? Perhaps a switch in the network recognizes the lldp packet and so does not forward it. |
2024-04-16 14:40:21 +0000 | edited question | TCP Port numbers reused TCP Port numbers reused Hi experts, For the pcap, SYN、SYN/ACK、RST、SYN、SYN/ACK、RST, When I ignore the No.4 SYN packet,Wh |
2024-04-16 14:19:48 +0000 | asked a question | TCP Port numbers reused TCP Port numbers reused Hi experts, For the pcap, SYN、SYN/ACK、RST、SYN、SYN/ACK、RST, When I ignore the No.4 SYN packet,Wh |
2024-04-15 00:40:19 +0000 | answered a question | TCP ACKed unseen segment I've found the answer.The value of maxseqtobeacked is 21. |
2024-04-13 10:17:52 +0000 | commented question | ACKED LOST PACKET & Zero Window Probe GT_SEQ(ack, tcpd->rev->tcp_analyze_seq_info->maxseqtobeacked) Is the value of 'maxseqtobeacked' 15621, not 156 |
2024-04-13 10:17:16 +0000 | commented question | ACKED LOST PACKET & Zero Window Probe GT_SEQ(ack, tcpd->rev->tcp_analyze_seq_info->maxseqtobeacked) Is the value of 'maxseqtobeacked' 15621, not 156 |
2024-04-11 13:27:20 +0000 | asked a question | ACKED LOST PACKET & Zero Window Probe ACKED LOST PACKET & Zero Window Probe Hi experts, For issue #8404 error.pcap,Is No.12 [TCP Window Update] determine |
2024-04-11 12:43:17 +0000 | asked a question | TCP ACKed unseen segment TCP ACKed unseen segment Hi experts, For the No.6 [TCP ACKed unseen segment], is the value of maxseqtobeacked 21? No.4 |
2024-04-10 14:25:31 +0000 | received badge | ● Autobiographer |
2024-04-07 09:24:24 +0000 | received badge | ● Notable Question (source) |
2024-04-07 09:24:10 +0000 | received badge | ● Notable Question (source) |
2024-03-30 06:43:41 +0000 | commented answer | tcpd->rev->is_first_ack Thank you so much for the clear explanation! |
2024-03-30 06:41:26 +0000 | marked best answer | tcpd->rev->is_first_ack Hi experts, For the TCP Analysis, What is "tcpd->rev->is_first_ack"? In which scenarios will it be used? Regards, 7ACE |
2024-03-29 13:16:47 +0000 | commented answer | tcpd->rev->is_first_ack tcpd->fwd?tcpd->rev? |
2024-03-29 12:25:11 +0000 | commented answer | tcpd->rev->is_first_ack https://gitlab.com/wireshark/wireshark/-/issues/14690 TcpWindowFull.pcap,Is No.68(SYN/ACK) the “tcpd->rev->is_fir |
2024-03-27 12:32:23 +0000 | edited question | tcpd->rev->is_first_ack tcpd->rev->is_first_ack Hi experts, For the TCP Analysis, What is "tcpd->rev->is_first_ack"? In which scena |
2024-03-27 12:29:23 +0000 | asked a question | tcpd->rev->is_first_ack tcpd->rev->is_first_ack Hi experts, For the TCP Analysis, What is "tcpd->rev->is_first_ack"? In which sc |
2024-03-27 12:21:23 +0000 | received badge | ● Notable Question (source) |
2024-03-27 12:21:21 +0000 | received badge | ● Popular Question (source) |
2023-10-11 08:24:35 +0000 | received badge | ● Popular Question (source) |
2023-09-29 14:42:40 +0000 | received badge | ● Famous Question (source) |
2023-09-29 14:41:56 +0000 | received badge | ● Notable Question (source) |
2023-09-29 14:41:44 +0000 | received badge | ● Popular Question (source) |
2023-07-06 14:29:15 +0000 | received badge | ● Notable Question (source) |
2023-07-06 14:29:15 +0000 | received badge | ● Popular Question (source) |
2023-03-06 05:20:44 +0000 | answered a question | how to Filter packets by time frame.time >= "Mar 1, 2023 16:22:00" && frame.time <= "Mar 1, 2023 16:24:00" |
2023-03-06 05:20:44 +0000 | received badge | ● Rapid Responder (source) |
2023-01-04 12:53:25 +0000 | received badge | ● Notable Question (source) |