ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Ethereal-dev: Re: [Ethereal-dev] Feature request - TCP Retransmission labeling

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Kevin <kem2@xxxxxxx>
Date: Wed, 6 Aug 2003 14:43:15 -0400

On Wednesday, August 6, 2003, at 02:30 PM, Guy Harris wrote:


On Wednesday, August 6, 2003, at 11:16 AM, Kevin wrote:

Could the same type of feature be added to TCP Retransmission frames? That is the frame number that is being retransmitted and possibly the delta time between them?

It looks as if it identifies suspected retransmissions.

However, in TCP, there isn't necessarily *a* frame that's being retransmitted, although that might be the typical case - a frame could retransmit data from several frames. Ethereal currently doesn't identify the frame or frames being retransmitted.

DOH! You ar correct, not enough coffee today. Could the frame that contains the segment(s) being retransmitted be identified?
Really stretching, in the original frame, could there be an indicator that says it was retransmitted?

That might be possible as well, although you'd only get it in Ethereal, not Tethereal (Tetheeal is, by design and intent, a single-pass program).

Not a problem, limitations understood.
Kevin