Ethereal

[Ethereal-users] help with trace
Google
 
Web Ethereal.com

Home | Introduction | Documentation | Lists | FAQ | Development | Wiki | Bugs

Ethereal-users: October 2005


All,
Here is summary output, I'm trying to understand the trace and how this error is appearing:


No. Time Source Destination Protocol Info
497 1.485957 192.168.7.1 192.168.7.2 TCP 2913 > 21325 [ACK] Seq=0 Ack=478574 Win=65535 Len=0
498 1.488912 192.168.7.2 192.168.7.1 TCP 21325 > 2913 [PSH, ACK] Seq=478574 Ack=0 Win=4882 Len=1460
499 1.491854 192.168.7.2 192.168.7.1 TCP 21325 > 2913 [PSH, ACK] Seq=480034 Ack=0 Win=4882 Len=1460
500 1.491873 192.168.7.1 192.168.7.2 TCP 2913 > 21325 [ACK] Seq=0 Ack=481494 Win=65535 Len=0
501 1.496921 192.168.7.2 192.168.7.1 TCP 21325 > 2913 [PSH, ACK] Seq=481494 Ack=0 Win=4882 Len=1460
502 1.499907 192.168.7.2 192.168.7.1 TCP 21325 > 2913 [PSH, ACK] Seq=482954 Ack=0 Win=4882 Len=1460
503 1.499925 192.168.7.1 192.168.7.2 TCP 2913 > 21325 [ACK] Seq=0 Ack=484414 Win=65535 Len=0
504 1.506937 192.168.7.1 192.168.7.2 TCP 2913 > 21325 [ACK] Seq=0 Ack=487334 Win=65535 Len=0
505 1.513872 192.168.7.1 192.168.7.2 TCP 2913 > 21325 [ACK] Seq=0 Ack=490254 Win=65535 Len=0
506 1.529892 192.168.7.1 192.168.7.2 TCP 2913 > 21325 [ACK] Seq=0 Ack=493032 Win=65535 Len=0
507 1.536946 192.168.7.1 192.168.7.2 TCP 2913 > 21325 [ACK] Seq=0 Ack=495952 Win=65535 Len=0
508 1.543941 192.168.7.1 192.168.7.2 TCP 2913 > 21325 [ACK] Seq=0 Ack=498872 Win=65535 Len=0
509 1.549945 192.168.7.1 192.168.7.2 TCP 2913 > 21325 [ACK] Seq=0 Ack=501792 Win=65535 Len=0
510 1.557944 192.168.7.1 192.168.7.2 TCP 2913 > 21325 [ACK] Seq=0 Ack=504712 Win=65535 Len=0
511 1.575907 192.168.7.1 192.168.7.2 TCP 2913 > 21325 [ACK] Seq=0 Ack=507490 Win=65535 Len=0
512 1.942997 192.168.7.2 192.168.7.1 TCP [TCP Previous segment lost] 21325 > 2913 [PSH, ACK] Seq=624632 Ack=10 Win=4872 Len=1460
513 1.943048 192.168.7.1 192.168.7.2 TCP [TCP Previous segment lost] 2913 > 21325 [ACK] Seq=10 Ack=626092 Win=65535 Len=0
514 1.946988 192.168.7.2 192.168.7.1 TCP 21325 > 2913 [PSH, ACK] Seq=626092 Ack=10 Win=4872 Len=1460
515 1.949965 192.168.7.2 192.168.7.1 TCP 21325 > 2913 [PSH, ACK] Seq=627552 Ack=10 Win=4872 Len=1460


What I don't understand 504-513, the packet stream is ok up until this point, but to me 504 is an ak to a frame that does not exist? Then 512 starts, like there was of several frames in a segment? Is this correct?



Powered by MHonArc 2.6.10