One Answer:
Well, the ACK number is the next expected sequence number by the receiver. So the server at 5001 has received all bytes up to 1595113 (tcp.nxtseq==1595113) and is now expecting the segment with tcp.seq==1595113. When wireshark flags it as a retransmission this indicates that it was lost in transit when it was initially sent.
So this is the same trace as in why-retransmission-occured-before-duplicated-ack if you filter tcp.nxtseq==1595113 or tcp.ack==1595113 or tcp.seq==1595113 and go to Statistics -> Flow Graph you see the relevant packets.
answered 22 Jun '15, 11:27  mrEEde edited 22 Jun '15, 11:55 |
Thanks for the answer
If you think that the question is answered to your satisfaction would you mind marking the given answer by clicking the checkmark icon ... That will close the question out. BTW maybe you can also close the other thread if it is the same issue ...