Wireshark · Wireshark-users: Re: [Wireshark-users] wireshark analysis for packet loss

[Jaap Keuter <jaap.keuter@xxxxxxxxx>]

Hi,

A good rule of thumb about Wireshark is to know that Wireshark van tell you what happend, but not why it happened.

That is where your expertise comes in. In this case it could either be that it was simply not captured, eg. during the start of a capture, or that it was indeed dropped somewhere, or something else. More insight could be gained by having measurements at different locations, eg. a capture at node0 together with node1. Again, your expertise as a network analist comes into play here.

Thanks,

Jaap

On 7 Feb 2017, at 06:35, samira afzal <afzal.samira@xxxxxxxxx> wrote:

down votefavorite

HI Everyone, I have a network like bellow. I captured pcap over node1 interface. I was checking pcap's statistics. My question is that when i get "tcp.analysis.lost_segment" , Does it mean these packets are lost through node0 to node1 (path1 +path2) or these lost packets happened over path2? path1 path2 .................Router............... . . . . node 0 node1 I sent this question in http://stackoverflow.com/questions/42060182/wireshark-analysis-for-packet-loss but i have not received any  reply there. I hope your guide. Thanks in advance