Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: Re: [Wireshark-users] Query regarding Wireshark

From: Andrew Hood <ajhood@xxxxxxxxx>
Date: Sat, 26 Mar 2011 22:43:32 +1100
Martin Visser wrote:
> Hmmm, obviously even on a multi-core machine the network drivers must be
> able to present packets to the OS network stack in the order on the wire.
> What mechanism allows libpcap to do thing in a different order. If what you
> are saying is correct, that has to be a major issue in libpcap?

TCP traffic is allowed to arrive out of order. The OS stack will
reassemble it in the correct order.

With other traffic it has always been the application's problem to deal
with out of order data. The OS stack may have to deal with reassembling
fragments.

Andrew
-- 
There's no point in being grown up if you can't be childish sometimes.
                -- Dr. Who