I guess using a filter like: tcp.analysis.lost_segment && tcp.analysis.ack_lost_segment could display the packets that are not in the capture file nor in the wire. The receiver doesn't have them at all. asked 31 Jul '15, 11:44  flora closed 04 Aug '15, 06:55 |
The question has been closed for the following reason “Duplicate Question” by flora 04 Aug ‘15, 06:55
One Answer:
Easily said no. But this can indicate missing packets: tcp.analysis.lost_segment is telling you just that the frame is not in capture file. One probably reason can be indeed that the frame was not on the wire at the capture point another reason can be for example that the frame was not captured correctly. tcp.analysis.ack_lost_segment is telling you that the corresponding segment is not in the tracefile but the correct answer for the missing segment is in the tracefile. The most likely reason for that is that the endpoint has seen the missing segment and acknowledged it correctly. answered 31 Jul '15, 16:34  Christian_R |
