This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hi, I'm a college student studying wireless networking protocols.

I want to filter all the TCP retransmission packets to calculate TCP retransmission rate. But my monitor mode Wireshark could only capture small fraction of all packets.

I heard that filtering retransmitted TCP packet is done by tcp.analysis.retransmission / tcp.analysis.fast_retransmission / tcp.analysis.spurious_retransmission filters but the filters are only look up sequence number of captured TCP packets.

So, the filters cannot be used in our test environment due to large loss rate on capturing packets..

But in 802.11 packet header, there is frame control field which contains retry flag which denotes retransmission. So, can I use 'wlan.fc.retry && tcp' filter to filter retransmitted TCP packets?

Thanks.

asked 14 Apr '17, 02:17

jayheo's gravatar image

jayheo
6335
accept rate: 0%

Be the first one to answer this question!
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×752
×349
×114
×104
×41

question asked: 14 Apr '17, 02:17

question was seen: 3,660 times

last updated: 14 Apr '17, 02:17

p​o​w​e​r​e​d by O​S​Q​A