Ethereal-users: [Ethereal-users] help with trace

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Tim Michals" <tcmichals@xxxxxxx>
Date: Fri, 07 Oct 2005 19:16:11 +0000
All,
Here is summary output, I'm trying to understand the trace and how this error is appearing:

No. Time Source Destination Protocol Info 497 1.485957 192.168.7.1 192.168.7.2 TCP 2913 > 21325 [ACK] Seq=0 Ack=478574 Win=65535 Len=0 498 1.488912 192.168.7.2 192.168.7.1 TCP 21325 > 2913 [PSH, ACK] Seq=478574 Ack=0 Win=4882 Len=1460 499 1.491854 192.168.7.2 192.168.7.1 TCP 21325 > 2913 [PSH, ACK] Seq=480034 Ack=0 Win=4882 Len=1460 500 1.491873 192.168.7.1 192.168.7.2 TCP 2913 > 21325 [ACK] Seq=0 Ack=481494 Win=65535 Len=0 501 1.496921 192.168.7.2 192.168.7.1 TCP 21325 > 2913 [PSH, ACK] Seq=481494 Ack=0 Win=4882 Len=1460 502 1.499907 192.168.7.2 192.168.7.1 TCP 21325 > 2913 [PSH, ACK] Seq=482954 Ack=0 Win=4882 Len=1460 503 1.499925 192.168.7.1 192.168.7.2 TCP 2913 > 21325 [ACK] Seq=0 Ack=484414 Win=65535 Len=0 504 1.506937 192.168.7.1 192.168.7.2 TCP 2913 > 21325 [ACK] Seq=0 Ack=487334 Win=65535 Len=0 505 1.513872 192.168.7.1 192.168.7.2 TCP 2913 > 21325 [ACK] Seq=0 Ack=490254 Win=65535 Len=0 506 1.529892 192.168.7.1 192.168.7.2 TCP 2913 > 21325 [ACK] Seq=0 Ack=493032 Win=65535 Len=0 507 1.536946 192.168.7.1 192.168.7.2 TCP 2913 > 21325 [ACK] Seq=0 Ack=495952 Win=65535 Len=0 508 1.543941 192.168.7.1 192.168.7.2 TCP 2913 > 21325 [ACK] Seq=0 Ack=498872 Win=65535 Len=0 509 1.549945 192.168.7.1 192.168.7.2 TCP 2913 > 21325 [ACK] Seq=0 Ack=501792 Win=65535 Len=0 510 1.557944 192.168.7.1 192.168.7.2 TCP 2913 > 21325 [ACK] Seq=0 Ack=504712 Win=65535 Len=0 511 1.575907 192.168.7.1 192.168.7.2 TCP 2913 > 21325 [ACK] Seq=0 Ack=507490 Win=65535 Len=0 512 1.942997 192.168.7.2 192.168.7.1 TCP [TCP Previous segment lost] 21325 > 2913 [PSH, ACK] Seq=624632 Ack=10 Win=4872 Len=1460 513 1.943048 192.168.7.1 192.168.7.2 TCP [TCP Previous segment lost] 2913 > 21325 [ACK] Seq=10 Ack=626092 Win=65535 Len=0 514 1.946988 192.168.7.2 192.168.7.1 TCP 21325 > 2913 [PSH, ACK] Seq=626092 Ack=10 Win=4872 Len=1460 515 1.949965 192.168.7.2 192.168.7.1 TCP 21325 > 2913 [PSH, ACK] Seq=627552 Ack=10 Win=4872 Len=1460

What I don't understand 504-513, the packet stream is ok up until this point, but to me 504 is an ak to a frame that does not exist? Then 512 starts, like there was of several frames in a segment? Is this correct?