This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Understanding PING (reply in XXXX) Packets

0

Hi,

I get following response on Wireshark while running ping 195.8.215.136 on windows PC:

6007 11.928578000 58.65.XXX.XXX 195.8.215.136 ICMP 74 Echo (ping) request id=0x000c, seq=17134/60994, ttl=128 (reply in 6014)

6341 12.929617000 58.65.XXX.XXX 195.8.215.136 ICMP 74 Echo (ping) request id=0x000c, seq=17136/61506, ttl=128 (reply in 6353)

6430 13.930676000 58.65.XXX.XXX 195.8.215.136 ICMP 74 Echo (ping) request id=0x000c, seq=17137/61762, ttl=128 (no response found!)

As per my findings (no response found!) is due to firewall blocking but I dont understand first two messages. Any help in this regard would be appreciated.

asked 17 Jul '15, 07:40

noman4ever's gravatar image

noman4ever
6112
accept rate: 0%


One Answer:

1

The first two ping requests were answered in packets 6014 and 6353, respectively. The third was either blocked, or Wireshark just doesn't have the response packet in the capture file and thus could not match it to the request.

answered 17 Jul '15, 07:44

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%

Thank you for your reply.

(17 Jul '15, 09:10) noman4ever