Hi, I'm a college student studying wireless networking protocols. I want to filter all the TCP retransmission packets to calculate TCP retransmission rate. But my monitor mode Wireshark could only capture small fraction of all packets. I heard that filtering retransmitted TCP packet is done by tcp.analysis.retransmission / tcp.analysis.fast_retransmission / tcp.analysis.spurious_retransmission filters but the filters are only look up sequence number of captured TCP packets. So, the filters cannot be used in our test environment due to large loss rate on capturing packets.. But in 802.11 packet header, there is frame control field which contains retry flag which denotes retransmission. So, can I use 'wlan.fc.retry && tcp' filter to filter retransmitted TCP packets? Thanks. asked 14 Apr '17, 02:17 jayheo |