Ethereal-users: Re: [Ethereal-users] out of order packets

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: fonte fonte <fonte_monte@xxxxxxxxx>
Date: Fri, 19 May 2006 02:10:21 -0700 (PDT)
Hi all,

I would like to clarify this. I always get different values for number of retransmission and out-of-order packets from ethereal and tcptrace. Is the fix below will take care of my problem?

Is there a possibility in the future perhaps that ethereal will incorporate tcptrace analysis? Capture and analysis in one. I hope I'm not asking too much?

One more question, what is the difference between 0.99 version with the 0.10 version? I tried the ethereal page but I don't see any info on it..or maybe I miss it.

Last note, really appreciate the hard work you guys doing on improving ethereal and still keep it free.

Thanks.



ronnie sahlberg <ronniesahlberg@xxxxxxxxx> wrote:
The new code in 0.99 and svn should fix most of the issues.
There is a bug in bugzilla for 0.99 where ethereal mistakes real retransmissions as being out-of-order
which i will look at during the weekend.


On 5/19/06, Guy Harris <gharris@xxxxxxxxx> wrote:
Peter Bruno wrote:
> If packets are recieved out of order (determined by
> looking at the IP Identification),

Or, presumably, by looking at the TCP sequence number...

> they are flagged as
> 'TCP Previous segment lost' and then the next packet
> as 'TCP Fast Retransmission'.
>
> Is it possible to disable this part of the TCP
> analysis without having to turn off all analysis?

Not as far as I know - but the TCP analysis should handle OOO packets
correctly.  For example, "TCP Previous segment lost" should perhaps be
"TCP Previous segment lost or out of order".

Ronnie, when did the rewritten TCP analysis go in, and did it fix these
problems?


_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users

_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users


Sneak preview the all-new Yahoo.com. It's not radically different. Just radically better.
_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users