This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

types of results

-1

Hi every one.

I'm monitoring one server with wireshark and sometimes I get this:

2907    TCP 46320   86→10003 [PSH, ACK] Seq=1587769 Ack=64585 Win=65280 Len=46266

Can someone tell me what does it mean please?

thnaks in advanced.

asked 21 May '15, 11:55

arduzj's gravatar image

arduzj
5112
accept rate: 0%

edited 24 May '15, 03:05

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237

what value would you have explained?

(22 May '15, 04:00) Christian_R

I bet it's the PSH :-)

(22 May '15, 09:25) Jasper ♦♦

I bet it's the 10003

(22 May '15, 12:28) Kurt Knochner ♦

the whole line will work

(22 May '15, 18:11) arduzj

Should this be tagged as "homework"?

(22 May '15, 20:53) cmaynard ♦♦

O.K. let's do that for the moment, until @arduzj asks a real question ;-)

(24 May '15, 03:05) Kurt Knochner ♦

This a real forum. Instant answers at the time you need.

(24 May '15, 12:42) arduzj

Arduzj, your question is unclear. Is there something specific in that output that you don't understand or want clarification on?

At a high level, I can say that line represents a TCP packet. PSH and ACK are flags which are "set" in that packet, and the other values there relate to various other TCP-related parameters (sequence/acknowledgement numbers, window size, length).

But, when you just say "what does it mean" without explaining what "it" is that you aren't clear on, it's hard to approach your question with a meaningful answer. I think this is what the others are getting at.

(24 May '15, 14:28) Quadratic
showing 5 of 8 show 3 more comments