This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

TCP ACked Unseen Segment

0

Hi all,

I am getting the TCP ACKed Unseen segment. Could anyone explain the stats of these packets. Why is it like this? 760 10:11:22.438873 10.2.248.47 10.110.64.48 TCP 58 [TCP ACKed unseen segment] 42161→3200 [RST, ACK] Seq=322 Ack=2420 Win=0 Len=0 761 10:11:22.438878 10.110.64.48 10.2.248.47 TCP 58 [TCP ACKed unseen segment] 3200→42161 [RST, ACK] Seq=2420 Ack=322 Win=0 Len=0

asked 24 Sep '15, 23:38

rcrkollam's gravatar image

rcrkollam
6●1●1●2
accept rate: 0%

edited 25 Sep '15, 02:37

grahamb's gravatar image

grahamb ♦
19.8k●3●30●206

One Answer:

0

"TCP ACKed unseen segment" means that this packet acknowledges data that wasn't captured. It was transferred okay, and the receiver acknowledges it, but Wireshark can't find the packet in the capture. This usually happens when the capture device wasn't fast enough.

answered 25 Sep '15, 02:16

Jasper's gravatar image

Jasper ♦♦
23.8k●5●51●284
accept rate: 18%