ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Wireshark-dev: [Wireshark-dev] sctp TSN plot & retransmissions

From: Cristian Constantin <cristian.constantin@xxxxxxxxx>
Date: Thu, 20 Aug 2009 11:47:16 +0200
hi!

I am trying to plot the tsns in an association's data flow; anyway the
result is not what I expect. here are some details:

0. wireshark on linux/debian:

cco@xxx:~$ dpkg -l | grep wireshark
ii  wireshark                            1.2.1-1                            network traffic analyzer
ii  wireshark-common                     1.2.1-1                            network traffic analyser (common files)

1. flow contains handshake as well.
2. at the receiver I have an iptables rule dropping SACKs and DATA on
the input chain. so basically SACKs and DATA chunks arrive, wireshark
also sees them, the application not and that is why it is initiating
retransmissions.
3. if I enable the TSN analysis from the SCTP protocol menu, it will
basically tell me when a CHUNK is retransmitted, that the SACK was also
seen aso.
4. I am trying to plot the TSNs to have an overview (using Telephony/
SCTP/Analyse this association). it is showing all the TSNs up to the
ones that are retransmitted as I have explained at 2. any idea what
happens? is there a maximum number of tsns that are shown on the
graph?

thanks a lot!
bye now!
cristian