This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hi all,

I am getting the TCP ACKed Unseen segment. Could anyone explain the stats of these packets. Why is it like this? 760 10:11:22.438873 10.2.248.47 10.110.64.48 TCP 58 [TCP ACKed unseen segment] 42161→3200 [RST, ACK] Seq=322 Ack=2420 Win=0 Len=0 761 10:11:22.438878 10.110.64.48 10.2.248.47 TCP 58 [TCP ACKed unseen segment] 3200→42161 [RST, ACK] Seq=2420 Ack=322 Win=0 Len=0

asked 24 Sep '15, 23:38

rcrkollam's gravatar image

rcrkollam
6112
accept rate: 0%

edited 25 Sep '15, 02:37

grahamb's gravatar image

grahamb ♦
19.8k330206


"TCP ACKed unseen segment" means that this packet acknowledges data that wasn't captured. It was transferred okay, and the receiver acknowledges it, but Wireshark can't find the packet in the capture. This usually happens when the capture device wasn't fast enough.

permanent link

answered 25 Sep '15, 02:16

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×139
×17
×14

question asked: 24 Sep '15, 23:38

question was seen: 40,588 times

last updated: 25 Sep '15, 02:37

p​o​w​e​r​e​d by O​S​Q​A