This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Wireshark error with “TCP Acked unseen segment”?

0

Hey,

I've got a question about the message "TCP Acked unseen segment". We made a trace and we've got this message, but the segment was traced also. So could there be a bug with Wireshark?

The trace is saved on cloudshark: http://www.cloudshark.org/captures/a47e3794dd1a

Thanks for your help!

Best regards, dranigl

asked 26 Feb '13, 04:36

dranigl's gravatar image

dranigl
14668
accept rate: 0%


One Answer:

1

It looks like a wireshark bug indeed. Frame 9 is a retransmission of frame 8, but with new data atached to it. It looks like wireshark does not update its pointers correctly in this case.

You can see this more clearly when you "ignore" frame 8 (Edit -> Ignore packet), then the ACK acks all received data and there is no expert message.

Could you file a bug report on https://bugs.wireshark.org?

answered 26 Feb '13, 05:49

SYN-bit's gravatar image

SYN-bit ♦♦
17.1k957245
accept rate: 20%

Thanks for your answer! Yes I'll file a bug report

(27 Feb '13, 00:03) dranigl