This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Given that the ISN of a packet of a TCP flow is 4290000000 and the sequence number of the FIN packet is 100000, how do i find the size of the total file?

asked 21 Apr '15, 19:30

Alicia%20Soh's gravatar image

Alicia Soh
1111
accept rate: 0%


You don't, at least not reliably, because the sequence number is "only" 32 bits and you can't say for sure how often it wrapped during the file transfer. Also, there may be multiple files transferred in one TCP session, which again denies deduction of the file sizes.

It's usually better to use the high level protocol fields carrying the file size to determine it.

permanent link

answered 22 Apr '15, 02:07

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×752
×248
×39
×32
×16

question asked: 21 Apr '15, 19:30

question was seen: 2,431 times

last updated: 22 Apr '15, 02:07

p​o​w​e​r​e​d by O​S​Q​A