This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Add column for “ACK For” field

1

Can anyone help me guide how can we add coloumn ACK for , where it will say that current packet is acknowledged for Packt no XYZ.

Thank for help.

asked 15 Jul '13, 02:32

m_1607's gravatar image

m_1607
35121316
accept rate: 0%

edited 15 Jul '13, 02:36

grahamb's gravatar image

grahamb ♦
19.8k330206


2 Answers:

5

If I understand your question correctly, you want a column that shows the content of the field "tcp.analysis.acks_frame"?

You can do this by manually adding a custom column in the column preferences. Or you can select an ACK packet and expand the trees in the packet detail pane. Then rightclick on the line "This is an ACK to the segment in frame: xxx" and choose "Apply as Column". Then rightclick on the header of the new column and choose "Edit column Details" to change the column title to "ACK".

answered 15 Jul '13, 02:51

SYN-bit's gravatar image

SYN-bit ♦♦
17.1k957245
accept rate: 20%

1

Due to TCP being able to acknowledge multiple successfully recieved segments within a single ACK, there is no such information quickly accessible. The ACK number tells you the next expected sequence number so what you are looking for is a way to differentiate the current ACK number from the previously recieved ACK number and then looking up incoming segments' sequence numbers to see how many and which have matched in between.

answered 15 Jul '13, 02:36

Landi's gravatar image

Landi
2.3k51442
accept rate: 28%