Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] Are retransmitted packets sometimes labelled as TCP out of o

From: Jeff Morriss <jeff.morriss.ws@xxxxxxxxx>
Date: Thu, 2 Mar 2017 17:40:25 -0500


On Tue, Feb 28, 2017 at 11:42 PM, ajay saxena <aileronajay@xxxxxxxxx> wrote:
Hi,

I am analyzing a dump file using Wireshark and I found that some of the TCP messages that are sent again (with the same ACK) number are labelled as TCP Out of Rrder by Wireshark. I was expecting to find them labelled as retransmission messages. Is there a reason why the packets are labelled out of order instead of re transmission?

Check out this conversation from many moons ago (both my response and Jasper's followup):

https://www.wireshark.org/lists/wireshark-dev/201409/msg00052.html