Wireshark-dev: Re: [Wireshark-dev] sctp TSN plot & retransmissions
From: Michael Tüxen <[email protected]>
Date: Thu, 20 Aug 2009 12:56:54 +0200
On Aug 20, 2009, at 11:47 AM, Cristian Constantin wrote:


I am trying to plot the tsns in an association's data flow; anyway the
result is not what I expect. here are some details:

0. wireshark on linux/debian:

[email protected]:~$ dpkg -l | grep wireshark
ii wireshark 1.2.1-1 network traffic analyzer ii wireshark-common 1.2.1-1 network traffic analyser (common files)
1. flow contains handshake as well.
2. at the receiver I have an iptables rule dropping SACKs and DATA on
the input chain. so basically SACKs and DATA chunks arrive, wireshark
also sees them, the application not and that is why it is initiating
3. if I enable the TSN analysis from the SCTP protocol menu, it will
basically tell me when a CHUNK is retransmitted, that the SACK was also
seen aso.
4. I am trying to plot the TSNs to have an overview (using Telephony/
SCTP/Analyse this association). it is showing all the TSNs up to the
ones that are retransmitted as I have explained at 2. any idea what
happens? is there a maximum number of tsns that are shown on the

Is wireshark seeing the packets at all? Where are you capturing the
traffic? At the same node where iptables runs? How does iptables and
capturing interact?

Best regards
thanks a lot!
bye now!
Sent via:    Wireshark-dev mailing list <[email protected]xxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
            mailto:[email protected]?subject=unsubscribe