Imagotype-NetworkDataPedia (1)_edited.pn

NetworkDataPedia © 2018-2020  |  Editorial Team   |   Privacy Policies  |  Contact Us          Website built by DYCMarketing 

Duplicate Packets and TCP Retransmissions

May 16, 2016

Have you ever looked at a Wireshark trace and thought, "There's an awful lot of retransmissions there"?  The problem is that the Info field in Wireshark marks a packet as a TCP Retransmission when it truly is one, when the packet is looping or even when a SPAN port has been misconfigured.

 

 

Luckily there are a few tell tale signs to help us figure out the true situation.

 

In this week's video we look at traces for three different scenarios.

 

 

What we discover is that three values (Sequence Number, IP ID and TTL) are the keys to enlightenment.

Share on Facebook
Share on Twitter
Please reload

Sponsored By:

Viavi

Display_LoveMyTool_170x400.png
Recent Posts

November 12, 2019

Please reload