Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 4965] Wrong calculation of the field "tcp.analysis.bytes_i

Date: Thu, 1 Jul 2010 14:42:07 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4965

Bill Meier <wmeier@xxxxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |FIXED

--- Comment #1 from Bill Meier <wmeier@xxxxxxxxxxx> 2010-07-01 17:42:06 EDT ---
I agree that Wireshark 1.2.9 does not always calculate the "bytes in flight"
correctly (as you've indicated).

The current development Wireshark does seem to calculate this field correctly
(based upon checking a sample of the values incorrect in 1.2.9 against the
values calculated in the development version of Wireshark).

So: It appears that this bug got fixed at some point in the development version
of Wireshark altho (Taking a quick look at the revision history) I don't see
when.

If you wish you can confirm by downloading the current release candidate for
the upcoming Wireshark 1.4 release (see
http://www.wireshark.org/download.html).

Or: you can wait for the official 1.4 release (which I expect will appear in
not too many weeks).

I'll mark this as 'fixed' (in development). If I've missed something and you
find that the problem still exists with the 1.4 release, please reopen this
bug.

Thanks for the report.

PS:

In the future, it would be better to post the results of your calculations as a
text file. Not everyone will be able to read Excel files.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.