Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: [Wireshark-users] Help: Confuse about TCP Previous Segment Lost

From: Joe Kuan <joe.kuan@xxxxxxxxxxxx>
Date: Fri, 10 Jul 2009 10:31:03 +0100
Hi all,

I have tried to analyse some of the capture files and noticed that there were 'TCP Previous Segment Lost'. If so, how come I can still see the data part of the lost segment. I would expect to see all 0x00 in the data part or partial data there. Am I missing something?

  I am using Wireshark 1.2 on Mac OS X.

Many thanks
Joe