This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hi, May be my basics is not really correct. But shouldn't next sequence no. be sequence no. + tcp len + 1 ? Please help.

asked 07 Jun '17, 02:34

user_shark's gravatar image

user_shark
6224
accept rate: 0%

converted to question 07 Jun '17, 02:36

Jasper's gravatar image

Jasper ♦♦
23.8k551284


No, it's "current sequence number" plus TCP payload length. The only exception are SYN and FIN flags, which both count as "ghost bytes", so if any of those is present in a packet, the sequence number is increased by +1 (plus actual payload length, if any).

permanent link

answered 07 Jun '17, 02:37

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×752
×39

question asked: 07 Jun '17, 02:34

question was seen: 1,385 times

last updated: 07 Jun '17, 02:37

p​o​w​e​r​e​d by O​S​Q​A