Wireshark · Wireshark-users: Re: [Wireshark-users] match packets at sender and receiver

Wireshark-users: Re: [Wireshark-users] match packets at sender and receiver

From: Andrej van der Zee <andrejvanderzee@xxxxxxxxx>

Date: Tue, 20 Apr 2010 17:33:59 +0900

Hi,


>
> In a single 1.7GB cap-file with 17424367 TCP packets I get 27
> identical packets based on the above id.
>

Note that the identical packages always have packet-length 54 or 60,
so I guess it is some kind of acknowledge packet. Not sure though as I
am not very familiar with the TCP protocol internals.

Cheers,
Andrej

References:
- [Wireshark-users] match packets at sender and receiver
  - From: Andrej van der Zee
- Re: [Wireshark-users] match packets at sender and receiver
  - From: Ian Schorr
- Re: [Wireshark-users] match packets at sender and receiver
  - From: Andrej van der Zee
- Re: [Wireshark-users] match packets at sender and receiver
  - From: Ian Schorr
- Re: [Wireshark-users] match packets at sender and receiver
  - From: Andrej van der Zee

Prev by Date: [Wireshark-users] Wireshark and Big Sniffs
Next by Date: Re: [Wireshark-users] Wireshark and Big Sniffs
Previous by thread: Re: [Wireshark-users] match packets at sender and receiver
Next by thread: Re: [Wireshark-users] match packets at sender and receiver
Index(es):
- Date
- Thread