This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

alt text

While capturing the pcap,i had found some issue like, same source sends PSH,ACK and ACK.Below is the attached screen shot.Is it possible like that.

asked 01 Aug '17, 04:21

kodamagulla_kalyan's gravatar image

kodamagulla_...
6113
accept rate: 0%

edited 01 Aug '17, 04:22


Sure, that's possible. PSH/ACK just means "this is something the receiver can process right away" - it doesn't mean that there can't be more following it.

permanent link

answered 01 Aug '17, 04:36

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%

Can you please elabrate below q.

Say in PSH,ACK from x to y seq = 7732 ack =1 len =831. immediate ACK from x to y seq = 8563( 7732 + 831) ack =1 len = 1448 happens.

So why it has to send again ACK with adding seq with len ? I was assuming this has to be done by the reciever end.

-Thanks

(01 Aug '17, 04:49) kodamagulla_...

ACK is only increased by the receiver if TCP payload bytes (len value) arrived successfully. If x sends two packets in a row, ACK must not change because nothing was received from y in the meantime.

(01 Aug '17, 04:55) Jasper ♦♦
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×1,620
×205
×17

question asked: 01 Aug '17, 04:21

question was seen: 706 times

last updated: 01 Aug '17, 04:55

p​o​w​e​r​e​d by O​S​Q​A