Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 1847] TCP Duplicate ACK's not being marked as such in "Exp

Date: Mon, 8 Nov 2010 15:04:37 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1847

--- Comment #2 from Chris Maynard <christopher.maynard@xxxxxxxxx> 2010-11-08 15:04:33 PST ---
Wondering if anyone could take a look at this?  (packet-tcp.c really confuses
me.)

Perhaps another sequence of events summarized differently?
3)  .59 -> .159 Seq#1449
15) .159 -> .59 ACK#1449 (+PSH)
16) .59 -> .159 Seq#1449 (TCP Retransmission)
18) .159 -> .59 ACK#1449 (+PSH) <= This is actually the 1st duplicate ACK.
19) .159 -> .59 ACK#1449 (Dup ACK 18#1)  <= Should be Dup ACK 15#2
21) .159 -> .59 ACK#1449 (Dup ACK 18#2)  <= Should be Dup ACK 15#3
23) .159 -> .59 ACK#1449 (Dup ACK 18#3)  <= Should be Dup ACK 15#4
25) .159 -> .59 ACK#1449 (Dup ACK 18#4)  <= Should be Dup ACK 15#5
27) .159 -> .59 ACK#1449 (Dup ACK 18#5)  <= Should be Dup ACK 15#6
29) .159 -> .59 ACK#1449 (Dup ACK 18#6)  <= Should be Dup ACK 15#7
31) .159 -> .59 ACK#1449 (Dup ACK 18#7)  <= Should be Dup ACK 15#8
33) .159 -> .59 ACK#1449 (Dup ACK 18#8)  <= Should be Dup ACK 15#9
35) .159 -> .59 ACK#1449 (Dup ACK 18#9)  <= Should be Dup ACK 15#10
37) .159 -> .59 ACK#1449 (Dup ACK 18#10) <= Should be Dup ACK 15#11
39) .159 -> .59 ACK#1449 (Dup ACK 18#11) <= Should be Dup ACK 15#12
41) .159 -> .59 ACK#1449 (Dup ACK 18#12) <= Should be Dup ACK 15#13
43) .159 -> .59 ACK#1449 (+PSH) <= This is actually the 14th duplicate ACK.
44) .159 -> .59 ACK#1449 (Dup ACK 43#1)  <= Should be Dup ACK 15#15
46) .159 -> .59 ACK#1449 (Dup ACK 43#2)  <= Should be Dup ACK 15#16
48) .159 -> .59 ACK#1449 (Dup ACK 43#3)  <= Should be Dup ACK 15#17
50) .159 -> .59 ACK#1449 (Dup ACK 43#4)  <= Should be Dup ACK 15#18
52) .159 -> .59 ACK#1449 (Dup ACK 43#5)  <= Should be Dup ACK 15#19
54) .159 -> .59 ACK#1449 (Dup ACK 43#6)  <= Should be Dup ACK 15#20
56) .159 -> .59 ACK#1449 (Dup ACK 43#7)  <= Should be Dup ACK 15#21
58) .159 -> .59 ACK#1449 (Dup ACK 43#8)  <= Should be Dup ACK 15#22
60) .159 -> .59 ACK#1449 (Dup ACK 43#9)  <= Should be Dup ACK 15#23
62) .159 -> .59 ACK#1449 (Dup ACK 43#10) <= Should be Dup ACK 15#24
64) .159 -> .59 ACK#1449 (Dup ACK 43#11) <= Should be Dup ACK 15#25
66) .159 -> .59 ACK#1449 (Dup ACK 43#12) <= Should be Dup ACK 15#26
68) .159 -> .59 ACK#1449 (Dup ACK 43#13) <= Should be Dup ACK 15#27
70) .159 -> .59 ACK#1449 (Dup ACK 43#14) <= Should be Dup ACK 15#28
72) .159 -> .59 ACK#1449 (Dup ACK 43#15) <= Should be Dup ACK 15#29
74) .159 -> .59 ACK#1449 (Dup ACK 43#16) <= Should be Dup ACK 15#30
76) .159 -> .59 ACK#1449 (Dup ACK 43#17) <= Should be Dup ACK 15#31
78) .159 -> .59 ACK#1449 (Dup ACK 43#18) <= Should be Dup ACK 15#32
79) .159 -> .59 ACK#1449 (+PSH) <= This is actually the 33rd duplicate ACK.
81) .59 -> .159 Seq#1449 (TCP Retransmission) <= FINALLY!

(For some reason from the time when I reported this bug and now, the seq #'s
appear to be off by 1, so where I had referred to 1448 before, the capture file
now indicates 1449.)

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.