Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: [Wireshark-users] Strange capture file

From: Thor Milde <Thor.Milde@xxxxxxxxxxxxx>
Date: Wed, 24 Mar 2010 21:16:24 +0000

Hi ,


I have a couple of captures done on a Windows XP PC where the user has complained about “lags” when he works on the companies Citrix server. The capture shows tcp out of order on about 30% of the packet, explaining the user’s experience. The majority of packets with this warning have the PC’s IP address as source and the Citrix servers IP address as destination. The part I don’t get is how packets sent from the local PC is able to be categorized as out of order by the Wireshark capture running on the same PC?



Thanks in advance,


Thor Milde