Ethereal-users: [Ethereal-users] Trap Results Question (Suspected TCP Segment Loss / Retransmiss

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Hildebrand, Brian" <BrianHildebrand@xxxxxxxxxxxxxxxxxxxxxxxx>
Date: Fri, 17 Jun 2005 13:24:55 -0500
Title: Trap Results Question (Suspected TCP Segment Loss / Retransmissions)

I am receiving some interesting results from some traps I am running. I am constantly getting flags from Ethereal for segment loss and retransmission from our WAN connection. Here is an example from an FTP session:

Time            Src     Dest            Seq             Ack             Flags                   Comments
0.054720        A       B               1               14601           ACK                    
0.056447        B       A               16061           1               PSH, ACK                Segment Loss
0.056514        A       B               1               14601           ACK                     Duplicate ACK  
0.060329        B       A               14601           1               ACK                     Retransmission
0.060441        A       B               1               16385           ACK                    

It appears like the packets are arriving out of order, but Ethereal is not flagging them as such. Has anyone seen something like this before? Any suggestions?


Thank you,

Brian