Wireshark · Ethereal-users: [Ethereal-users] Trap Results Question (Suspected TCP Segment Loss / Retransmissions)

["Hildebrand, Brian" <BrianHildebrand@xxxxxxxxxxxxxxxxxxxxxxxx>]

Title: Trap Results Question (Suspected TCP Segment Loss / Retransmissions)

I am receiving some interesting results from some traps I am running. I am constantly getting flags from Ethereal for segment loss and retransmission from our WAN connection. Here is an example from an FTP session:

Time            Src     Dest            Seq             Ack             Flags                   Comments
0.054720        A       B               1               14601           ACK                    
0.056447        B       A               16061           1               PSH, ACK                Segment Loss
0.056514        A       B               1               14601           ACK                     Duplicate ACK  
0.060329        B       A               14601           1               ACK                     Retransmission
0.060441        A       B               1               16385           ACK                    

It appears like the packets are arriving out of order, but Ethereal is not flagging them as such. Has anyone seen something like this before? Any suggestions?

Thank you,

Brian