This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Second frame payload unseen segment

0

Hi

I am trying to get my server to send multiple TCP frames. the problem I am having is that the second frame (second half of the payload) is an unseen segment and never makes it to the client. I have been trying to find the problem but I cant seem to resolve the issue.

I am new to using WS, so if you need more data let me know what you need. Thanks

Here is my WS captured info

alt text

asked 07 Dec '15, 21:27

cruzxia's gravatar image

cruzxia
6112
accept rate: 0%

You mentioned that "the second frame (second half of the payload) is an unseen segment and never makes it to the client."

How do you know this? Are you capturing packets on the server or as near to the server as possible? This will determine if the server is sending the missing segment.

Also, screen captures are hard to read. If you can, it is best to upload your capture to Google Drive or cloudshark so others can review. Others in the forum can then look at the complete capture.

From what I can interpret from the screen captures, it appears the client is resetting the TCP connection after missing a segment. If that is the case, then we must determine where the packet is dropped or if the server even sends it.

(08 Dec '15, 08:58) Amato_C

One Answer:

0

Thanks for the reply

I found the problem, the Ack in the second packet was increased by 1 so it wouldn't accept the data.

The strange thing is that it now works correctly and the server reports the correct value, but WireShark reports the Ack as 1 less than the value. The value is 405, it wasn't working when it was 406, I subtracted 1 and now WS shows as 404 and it works.

answered 09 Dec '15, 01:13

cruzxia's gravatar image

cruzxia
6112
accept rate: 0%