Hey, I've got a question about the message "TCP Acked unseen segment". We made a trace and we've got this message, but the segment was traced also. So could there be a bug with Wireshark? The trace is saved on cloudshark: http://www.cloudshark.org/captures/a47e3794dd1a Thanks for your help! Best regards, dranigl asked 26 Feb '13, 04:36  dranigl |
One Answer:
It looks like a wireshark bug indeed. Frame 9 is a retransmission of frame 8, but with new data atached to it. It looks like wireshark does not update its pointers correctly in this case. You can see this more clearly when you "ignore" frame 8 (Edit -> Ignore packet), then the ACK acks all received data and there is no expert message. Could you file a bug report on https://bugs.wireshark.org? answered 26 Feb '13, 05:49  SYN-bit ♦♦ |
Thanks for your answer! Yes I'll file a bug report