Ethereal
[Ethereal-users] help with trace
Subject : [Ethereal-users] help with trace
From : "Tim Michals" <tcmichals@xxxxxxx >
Date : Fri, 07 Oct 2005 19:16:11 +0000
All,
Here is summary output, I'm trying to understand the trace and how this
error is appearing:
No. Time Source Destination Protocol
Info
497 1.485957 192.168.7.1 192.168.7.2 TCP
2913 > 21325 [ACK] Seq=0 Ack=478574 Win=65535 Len=0
498 1.488912 192.168.7.2 192.168.7.1 TCP
21325 > 2913 [PSH, ACK] Seq=478574 Ack=0 Win=4882 Len=1460
499 1.491854 192.168.7.2 192.168.7.1 TCP
21325 > 2913 [PSH, ACK] Seq=480034 Ack=0 Win=4882 Len=1460
500 1.491873 192.168.7.1 192.168.7.2 TCP
2913 > 21325 [ACK] Seq=0 Ack=481494 Win=65535 Len=0
501 1.496921 192.168.7.2 192.168.7.1 TCP
21325 > 2913 [PSH, ACK] Seq=481494 Ack=0 Win=4882 Len=1460
502 1.499907 192.168.7.2 192.168.7.1 TCP
21325 > 2913 [PSH, ACK] Seq=482954 Ack=0 Win=4882 Len=1460
503 1.499925 192.168.7.1 192.168.7.2 TCP
2913 > 21325 [ACK] Seq=0 Ack=484414 Win=65535 Len=0
504 1.506937 192.168.7.1 192.168.7.2 TCP
2913 > 21325 [ACK] Seq=0 Ack=487334 Win=65535 Len=0
505 1.513872 192.168.7.1 192.168.7.2 TCP
2913 > 21325 [ACK] Seq=0 Ack=490254 Win=65535 Len=0
506 1.529892 192.168.7.1 192.168.7.2 TCP
2913 > 21325 [ACK] Seq=0 Ack=493032 Win=65535 Len=0
507 1.536946 192.168.7.1 192.168.7.2 TCP
2913 > 21325 [ACK] Seq=0 Ack=495952 Win=65535 Len=0
508 1.543941 192.168.7.1 192.168.7.2 TCP
2913 > 21325 [ACK] Seq=0 Ack=498872 Win=65535 Len=0
509 1.549945 192.168.7.1 192.168.7.2 TCP
2913 > 21325 [ACK] Seq=0 Ack=501792 Win=65535 Len=0
510 1.557944 192.168.7.1 192.168.7.2 TCP
2913 > 21325 [ACK] Seq=0 Ack=504712 Win=65535 Len=0
511 1.575907 192.168.7.1 192.168.7.2 TCP
2913 > 21325 [ACK] Seq=0 Ack=507490 Win=65535 Len=0
512 1.942997 192.168.7.2 192.168.7.1 TCP
[TCP Previous segment lost] 21325 > 2913 [PSH, ACK] Seq=624632 Ack=10
Win=4872 Len=1460
513 1.943048 192.168.7.1 192.168.7.2 TCP
[TCP Previous segment lost] 2913 > 21325 [ACK] Seq=10 Ack=626092 Win=65535
Len=0
514 1.946988 192.168.7.2 192.168.7.1 TCP
21325 > 2913 [PSH, ACK] Seq=626092 Ack=10 Win=4872 Len=1460
515 1.949965 192.168.7.2 192.168.7.1 TCP
21325 > 2913 [PSH, ACK] Seq=627552 Ack=10 Win=4872 Len=1460
What I don't understand 504-513, the packet stream is ok up until this
point, but to me 504 is an ak to a frame that does not exist? Then 512
starts, like there was of several frames in a segment? Is this correct?
Powered by MHonArc 2.6.10