This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

WIRESHARK GRAPH

0

How to read output from tcp stevens graph?

asked 31 May '13, 09:27

kishan%20pandey's gravatar image

kishan pandey
221282936
accept rate: 28%


One Answer:

0

It's TCP sequence numbers as they increment over time. It's a useful spotcheck for some TCP performance problems. For example if there is packet loss and Wireshark is in a spot to catch the retransmissions, you'll see the same Y value at two or more spots on the graph rather than a constant incline. If your question is what it literally means, it's the TCP sequence number increments over time for the TCP session belonging to the packet you have selected.

answered 31 May '13, 19:26

Quadratic's gravatar image

Quadratic
1.9k6928
accept rate: 13%

Thankx for reply,can u provide some documents to read on this.

(03 Jun '13, 02:01) kishan pandey

For the graph, here's a section from Google books that goes over it: http://books.google.ca/books?id=-AdTE9S3kigC&pg=PA197&lpg=PA197&dq=wireshark+stevens+graph&source=bl&ots=Y6BVvXKIuL&sig=9fkBSnmMuCA_Dhw1gYkBSeJE_9c&hl=en&sa=X&ei=rEWtUdbZF6HayAHArYHAAw&ved=0CFMQ6AEwBg#v=onepage&q=wireshark%20stevens%20graph&f=false

For what TCP sequence numbers fundamentally are, the only thing I can think to reference would be RFC 793, section 3.3 which defines them: http://www.ietf.org/rfc/rfc793.txt

(03 Jun '13, 18:45) Quadratic