This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hey,

I've got a question about the message "TCP Acked unseen segment". We made a trace and we've got this message, but the segment was traced also. So could there be a bug with Wireshark?

The trace is saved on cloudshark: http://www.cloudshark.org/captures/a47e3794dd1a

Thanks for your help!

Best regards, dranigl

asked 26 Feb '13, 04:36

dranigl's gravatar image

dranigl
14668
accept rate: 0%


It looks like a wireshark bug indeed. Frame 9 is a retransmission of frame 8, but with new data atached to it. It looks like wireshark does not update its pointers correctly in this case.

You can see this more clearly when you "ignore" frame 8 (Edit -> Ignore packet), then the ACK acks all received data and there is no expert message.

Could you file a bug report on https://bugs.wireshark.org?

permanent link

answered 26 Feb '13, 05:49

SYN-bit's gravatar image

SYN-bit ♦♦
17.1k957245
accept rate: 20%

Thanks for your answer! Yes I'll file a bug report

(27 Feb '13, 00:03) dranigl
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×34
×14

question asked: 26 Feb '13, 04:36

question was seen: 17,141 times

last updated: 27 Feb '13, 00:03

p​o​w​e​r​e​d by O​S​Q​A