This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

kindly help me to confirm to get confirmation of packet loss

0

Hi ,

Somebody can help there is file missing from client to server& observed below massage in the snoop logs.kindly help me to confirm is there packet drop during the data transmission.

"21618","5135.427497","172.29.0.52","10.31.96.9","TCP","[TCP segment of a reassembled PDU]" "21619","5135.427510","172.29.0.52","10.31.96.9","TCP","[TCP Dup ACK 21618#1] 34560 > ssh [ACK] Seq=302100 Ack=953008 Win=49640 Len=0 SLE=954468 SRE=955928" "21620","5135.517490","10.31.96.9","172.29.0.52","SSHv2","[TCP Previous segment lost] Encrypted response packet len=1460" "21621","5135.517525","172.29.0.52","10.31.96.9","TCP","[TCP Dup ACK 21618#2] 34560 > ssh [ACK] Seq=302100 Ack=953008 Win=49640 Len=0 SLE=957388 SRE=958848 SLE=954468 SRE=955928"

asked 10 Oct '12, 02:10

malli_mmk's gravatar image

malli_mmk
1222
accept rate: 0%


One Answer:

0

Based on the information provided, I can confirm packet loss. The error messages '[TCP Dup ACK]' and '[TCP Previous segment lost]' are a clear sign of packet loss.

Without further information it's impossible to tell why/where the loss takes place!

Regards
Kurt

answered 10 Oct '12, 11:56

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%