This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

TCP and FIN packet

0

Given that the ISN of a packet of a TCP flow is 4290000000 and the sequence number of the FIN packet is 100000, how do i find the size of the total file?

asked 21 Apr '15, 19:30

Alicia%20Soh's gravatar image

Alicia Soh
1111
accept rate: 0%


One Answer:

1

You don't, at least not reliably, because the sequence number is "only" 32 bits and you can't say for sure how often it wrapped during the file transfer. Also, there may be multiple files transferred in one TCP session, which again denies deduction of the file sizes.

It's usually better to use the high level protocol fields carrying the file size to determine it.

answered 22 Apr '15, 02:07

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%