This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Need filter to find last Sen and Ack that communicates with certain server ( i have ip of that server)

asked 08 Nov '14, 06:17

Skrndelj's gravatar image

Skrndelj
11224
accept rate: 0%

Sen ??, and Ack of what, tcp ?

(08 Nov '14, 07:16) grahamb ♦

Number of Sq and Ack when im braking relationship with server . So last Sq and Ack from communication with that server .

I have source ip and destination ip

(08 Nov '14, 07:20) Skrndelj

Nope, still doesn't make much sense to me, what is Sq? Please use the standard names for the items your asking for.

What is the protocol you're using with the server?

(08 Nov '14, 07:38) grahamb ♦

Its TCP protocol Seq and Ack is what i am after

Seq ( Sequence number ) Ack ( Acknowledgment number

(08 Nov '14, 07:41) Skrndelj

There's no filter to show you the last, you can only select frames that match a filter, you'll have to manually find the last one.

For acks sent to the server use:

tcp.flags.ack == 1 && ip.dst == server.ip

For acks from the server use:

tcp.flags.ack == 1 && ip.src == server.ip

permanent link

answered 08 Nov '14, 08:07

grahamb's gravatar image

grahamb ♦
19.8k330206
accept rate: 22%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×139
×1

question asked: 08 Nov '14, 06:17

question was seen: 1,205 times

last updated: 08 Nov '14, 08:07

p​o​w​e​r​e​d by O​S​Q​A