Wireshark-bugs: [Wireshark-bugs] [Bug 1695] New: statistics for ip-conversation tshark <-> wires

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Thu, 19 Jul 2007 08:41:20 +0000 (GMT)
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1695

           Summary: statistics for ip-conversation tshark <-> wireshark
                    differ
           Product: Wireshark
           Version: 0.99.5
          Platform: PC
        OS/Version: Linux
            Status: NEW
          Severity: Minor
          Priority: Low
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: rostrot@xxxxxx


Build Information:
TShark 0.99.5
=============
Copyright 1998-2007 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.


wireshark 0.99.5
================
Copyright 1998-2007 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled with GTK+ 2.8.3, with GLib 2.8.1, with libpcap 0.9.2, with libz 1.2.3,
without libpcre, without Net-SNMP, without ADNS, without Lua, without GnuTLS,
without Gcrypt, without Kerberos, without PortAudio, without AirPcap.
NOTE: this build doesn't support the "matches" operator for Wireshark filter
syntax.

Running on Linux 2.6.13-15-smp, with libpcap version 0.9.2.

Built using gcc 4.0.2 20050901 (prerelease) (SUSE Linux).


Compiled with GLib 2.8.1, with libpcap 0.9.2, with libz 1.2.3, without libpcre,
without Net-SNMP, without ADNS, without Lua, without GnuTLS, without Gcrypt,
without Kerberos.
NOTE: this build doesn't support the "matches" operator for Wireshark filter
syntax.

Running on Linux 2.6.13-15-smp, with libpcap version 0.9.2.

Built using gcc 4.0.2 20050901 (prerelease) (SUSE Linux).


--
wireshark and tshark differs in the  values for ipv4-conversation.
i read a dump with 37 frames, tshark reports with "-z conv,ip" 32 frames
(ok, 5 frames are "Packet size limited during capture", see bug 1527),
wireshark reports 30 frames.

first i modified the source from wireshark:

$vi gtk/conversations_ip.c

static int
ip_conversation_packet(void *pct, packet_info *pinfo, epan_dissect_t *edt _U_,
const void *vip)
{
  fprintf (stderr, "%d: IP-SRC (%s)  IP-DST (%s) LEN: %d\n",
                pinfo->fd->num, address_to_str(&iph->ip_src),
                address_to_str(&iph->ip_dst),
                pinfo->fd->pkt_len);
  ...
}

and i modified gtk/conversations_table.c
append to function add_conversation_table_data (..) :
    ....
    fprintf (stderr, "IDX:%d  IP-SRC (%s|%d)  IP-DST (%s|%d)",conversation_idx,
                 address_to_str(src), src_port, address_to_str(dst),dst_port);
    fprintf(stderr, "  RX: %d,%d  TX: %d,%d frame (num_frames =%d)\n",
                conversation->rx_frames, conversation->rx_bytes,
                conversation->tx_frames, conversation->tx_bytes,
                num_frames);
    ....


the output shows, that 7 frames not passed to ip_conversation_packet.
the 5 frames i expect (bug 1527) and 2 additional tcp-packets.
(missing frame 4,9,19,23,25,31,33)
the ouput:
==========
IDX:0  IP-SRC (10.151.217.103|4126)  IP-DST (164.25.248.71|5000)  RX: 1,64  TX:
0,0  num_f:(1)
1: IP-SRC (10.151.217.103)  IP-DST (164.25.248.71) LEN: 64
IDX:0  IP-SRC (10.151.217.103|0)  IP-DST (164.25.248.71|0)  RX: 0,0  TX: 1,64 
num_f:(1)
IDX:0  IP-SRC (00:50:56:88:34:a1|0)  IP-DST (00:00:0c:07:ac:23|0)  RX: 1,64 
TX: 0,0  num_f:(1)
IDX:0  IP-SRC (164.25.248.71|5000)  IP-DST (10.151.217.103|4126)  RX: 1,64  TX:
1,62  num_f:(1)
2: IP-SRC (164.25.248.71)  IP-DST (10.151.217.103) LEN: 62
IDX:0  IP-SRC (164.25.248.71|0)  IP-DST (10.151.217.103|0)  RX: 1,62  TX: 1,64 
num_f:(1)
IDX:1  IP-SRC (00:05:32:1a:47:82|0)  IP-DST (00:50:56:88:34:a1|0)  RX: 0,0  TX:
1,62  num_f:(1)
IDX:0  IP-SRC (10.151.217.103|4126)  IP-DST (164.25.248.71|5000)  RX: 2,128 
TX: 1,62  num_f:(1)
3: IP-SRC (10.151.217.103)  IP-DST (164.25.248.71) LEN: 64
IDX:0  IP-SRC (10.151.217.103|0)  IP-DST (164.25.248.71|0)  RX: 1,62  TX: 2,128
 num_f:(1)
IDX:0  IP-SRC (00:50:56:88:34:a1|0)  IP-DST (00:00:0c:07:ac:23|0)  RX: 2,128 
TX: 0,0  num_f:(1)
IDX:0  IP-SRC (10.151.217.103|4126)  IP-DST (164.25.248.71|5000)  RX: 3,694 
TX: 1,62  num_f:(1)
IDX:0  IP-SRC (10.151.217.103|4126)  IP-DST (164.25.248.71|5000)  RX: 4,845 
TX: 1,62  num_f:(1)
5: IP-SRC (10.151.217.103)  IP-DST (164.25.248.71) LEN: 151
IDX:0  IP-SRC (10.151.217.103|0)  IP-DST (164.25.248.71|0)  RX: 1,62  TX: 3,279
 num_f:(1)
IDX:0  IP-SRC (00:50:56:88:34:a1|0)  IP-DST (00:00:0c:07:ac:23|0)  RX: 3,279 
TX: 0,0  num_f:(1)
IDX:0  IP-SRC (164.25.248.71|5000)  IP-DST (10.151.217.103|4126)  RX: 4,845 
TX: 2,122  num_f:(1)
6: IP-SRC (164.25.248.71)  IP-DST (10.151.217.103) LEN: 60
IDX:0  IP-SRC (164.25.248.71|0)  IP-DST (10.151.217.103|0)  RX: 2,122  TX:
3,279  num_f:(1)
IDX:1  IP-SRC (00:05:32:1a:47:82|0)  IP-DST (00:50:56:88:34:a1|0)  RX: 0,0  TX:
2,122  num_f:(1)
IDX:0  IP-SRC (164.25.248.71|5000)  IP-DST (10.151.217.103|4126)  RX: 4,845 
TX: 3,245  num_f:(1)
7: IP-SRC (164.25.248.71)  IP-DST (10.151.217.103) LEN: 123
IDX:0  IP-SRC (164.25.248.71|0)  IP-DST (10.151.217.103|0)  RX: 3,245  TX:
3,279  num_f:(1)
IDX:1  IP-SRC (00:05:32:1a:47:82|0)  IP-DST (00:50:56:88:34:a1|0)  RX: 0,0  TX:
3,245  num_f:(1)
IDX:0  IP-SRC (10.151.217.103|4126)  IP-DST (164.25.248.71|5000)  RX: 5,1025 
TX: 3,245  num_f:(1)
8: IP-SRC (10.151.217.103)  IP-DST (164.25.248.71) LEN: 180
IDX:0  IP-SRC (10.151.217.103|0)  IP-DST (164.25.248.71|0)  RX: 3,245  TX:
4,459  num_f:(1)
IDX:0  IP-SRC (00:50:56:88:34:a1|0)  IP-DST (00:00:0c:07:ac:23|0)  RX: 4,459 
TX: 0,0  num_f:(1)
IDX:0  IP-SRC (164.25.248.71|5000)  IP-DST (10.151.217.103|4126)  RX: 5,1025 
TX: 4,460  num_f:(1)
IDX:0  IP-SRC (10.151.217.103|4126)  IP-DST (164.25.248.71|5000)  RX: 6,1113 
TX: 4,460  num_f:(1)
10: IP-SRC (10.151.217.103)  IP-DST (164.25.248.71) LEN: 88
IDX:0  IP-SRC (10.151.217.103|0)  IP-DST (164.25.248.71|0)  RX: 3,245  TX:
5,547  num_f:(1)
IDX:0  IP-SRC (00:50:56:88:34:a1|0)  IP-DST (00:00:0c:07:ac:23|0)  RX: 5,547 
TX: 0,0  num_f:(1)
IDX:0  IP-SRC (164.25.248.71|5000)  IP-DST (10.151.217.103|4126)  RX: 6,1113 
TX: 5,531  num_f:(1)
11: IP-SRC (164.25.248.71)  IP-DST (10.151.217.103) LEN: 71
IDX:0  IP-SRC (164.25.248.71|0)  IP-DST (10.151.217.103|0)  RX: 4,316  TX:
5,547  num_f:(1)
IDX:1  IP-SRC (00:05:32:1a:47:82|0)  IP-DST (00:50:56:88:34:a1|0)  RX: 0,0  TX:
4,316  num_f:(1)
IDX:0  IP-SRC (10.151.217.103|4126)  IP-DST (164.25.248.71|5000)  RX: 7,1196 
TX: 5,531  num_f:(1)
12: IP-SRC (10.151.217.103)  IP-DST (164.25.248.71) LEN: 83
IDX:0  IP-SRC (10.151.217.103|0)  IP-DST (164.25.248.71|0)  RX: 4,316  TX:
6,630  num_f:(1)
IDX:0  IP-SRC (00:50:56:88:34:a1|0)  IP-DST (00:00:0c:07:ac:23|0)  RX: 6,630 
TX: 0,0  num_f:(1)
IDX:0  IP-SRC (164.25.248.71|5000)  IP-DST (10.151.217.103|4126)  RX: 7,1196 
TX: 6,602  num_f:(1)
13: IP-SRC (164.25.248.71)  IP-DST (10.151.217.103) LEN: 71
IDX:0  IP-SRC (164.25.248.71|0)  IP-DST (10.151.217.103|0)  RX: 5,387  TX:
6,630  num_f:(1)
IDX:1  IP-SRC (00:05:32:1a:47:82|0)  IP-DST (00:50:56:88:34:a1|0)  RX: 0,0  TX:
5,387  num_f:(1)
IDX:0  IP-SRC (10.151.217.103|4126)  IP-DST (164.25.248.71|5000)  RX: 8,1281 
TX: 6,602  num_f:(1)
14: IP-SRC (10.151.217.103)  IP-DST (164.25.248.71) LEN: 85
IDX:0  IP-SRC (10.151.217.103|0)  IP-DST (164.25.248.71|0)  RX: 5,387  TX:
7,715  num_f:(1)
IDX:0  IP-SRC (00:50:56:88:34:a1|0)  IP-DST (00:00:0c:07:ac:23|0)  RX: 7,715 
TX: 0,0  num_f:(1)
IDX:0  IP-SRC (164.25.248.71|5000)  IP-DST (10.151.217.103|4126)  RX: 8,1281 
TX: 7,708  num_f:(1)
15: IP-SRC (164.25.248.71)  IP-DST (10.151.217.103) LEN: 106
IDX:0  IP-SRC (164.25.248.71|0)  IP-DST (10.151.217.103|0)  RX: 6,493  TX:
7,715  num_f:(1)
IDX:1  IP-SRC (00:05:32:1a:47:82|0)  IP-DST (00:50:56:88:34:a1|0)  RX: 0,0  TX:
6,493  num_f:(1)
IDX:0  IP-SRC (10.151.217.103|4126)  IP-DST (164.25.248.71|5000)  RX: 9,1345 
TX: 7,708  num_f:(1)
16: IP-SRC (10.151.217.103)  IP-DST (164.25.248.71) LEN: 64
IDX:0  IP-SRC (10.151.217.103|0)  IP-DST (164.25.248.71|0)  RX: 6,493  TX:
8,779  num_f:(1)
IDX:0  IP-SRC (00:50:56:88:34:a1|0)  IP-DST (00:00:0c:07:ac:23|0)  RX: 8,779 
TX: 0,0  num_f:(1)
IDX:0  IP-SRC (164.25.248.71|5000)  IP-DST (10.151.217.103|4126)  RX: 9,1345 
TX: 8,779  num_f:(1)
17: IP-SRC (164.25.248.71)  IP-DST (10.151.217.103) LEN: 71
IDX:0  IP-SRC (164.25.248.71|0)  IP-DST (10.151.217.103|0)  RX: 7,564  TX:
8,779  num_f:(1)
IDX:1  IP-SRC (00:05:32:1a:47:82|0)  IP-DST (00:50:56:88:34:a1|0)  RX: 0,0  TX:
7,564  num_f:(1)
IDX:0  IP-SRC (10.151.217.103|4126)  IP-DST (164.25.248.71|5000)  RX: 10,1432 
TX: 8,779  num_f:(1)
18: IP-SRC (10.151.217.103)  IP-DST (164.25.248.71) LEN: 87
IDX:0  IP-SRC (10.151.217.103|0)  IP-DST (164.25.248.71|0)  RX: 7,564  TX:
9,866  num_f:(1)
IDX:0  IP-SRC (00:50:56:88:34:a1|0)  IP-DST (00:00:0c:07:ac:23|0)  RX: 9,866 
TX: 0,0  num_f:(1)
IDX:0  IP-SRC (164.25.248.71|5000)  IP-DST (10.151.217.103|4126)  RX: 10,1432 
TX: 9,1039  num_f:(1)
IDX:0  IP-SRC (10.151.217.103|4126)  IP-DST (164.25.248.71|5000)  RX: 11,1496 
TX: 9,1039  num_f:(1)
20: IP-SRC (10.151.217.103)  IP-DST (164.25.248.71) LEN: 64
IDX:0  IP-SRC (10.151.217.103|0)  IP-DST (164.25.248.71|0)  RX: 7,564  TX:
10,930  num_f:(1)
IDX:0  IP-SRC (00:50:56:88:34:a1|0)  IP-DST (00:00:0c:07:ac:23|0)  RX: 10,930 
TX: 0,0  num_f:(1)
IDX:0  IP-SRC (164.25.248.71|5000)  IP-DST (10.151.217.103|4126)  RX: 11,1496 
TX: 10,1110  num_f:(1)
21: IP-SRC (164.25.248.71)  IP-DST (10.151.217.103) LEN: 71
IDX:0  IP-SRC (164.25.248.71|0)  IP-DST (10.151.217.103|0)  RX: 8,635  TX:
10,930  num_f:(1)
IDX:1  IP-SRC (00:05:32:1a:47:82|0)  IP-DST (00:50:56:88:34:a1|0)  RX: 0,0  TX:
8,635  num_f:(1)
IDX:0  IP-SRC (10.151.217.103|4126)  IP-DST (164.25.248.71|5000)  RX: 12,1583 
TX: 10,1110  num_f:(1)
22: IP-SRC (10.151.217.103)  IP-DST (164.25.248.71) LEN: 87
IDX:0  IP-SRC (10.151.217.103|0)  IP-DST (164.25.248.71|0)  RX: 8,635  TX:
11,1017  num_f:(1)
IDX:0  IP-SRC (00:50:56:88:34:a1|0)  IP-DST (00:00:0c:07:ac:23|0)  RX: 11,1017 
TX: 0,0  num_f:(1)
IDX:0  IP-SRC (164.25.248.71|5000)  IP-DST (10.151.217.103|4126)  RX: 12,1583 
TX: 11,1676  num_f:(1)
IDX:0  IP-SRC (10.151.217.103|4126)  IP-DST (164.25.248.71|5000)  RX: 13,1647 
TX: 11,1676  num_f:(1)
24: IP-SRC (10.151.217.103)  IP-DST (164.25.248.71) LEN: 64
IDX:0  IP-SRC (10.151.217.103|0)  IP-DST (164.25.248.71|0)  RX: 8,635  TX:
12,1081  num_f:(1)
IDX:0  IP-SRC (00:50:56:88:34:a1|0)  IP-DST (00:00:0c:07:ac:23|0)  RX: 12,1081 
TX: 0,0  num_f:(1)
IDX:0  IP-SRC (164.25.248.71|5000)  IP-DST (10.151.217.103|4126)  RX: 13,1647 
TX: 12,2196  num_f:(1)
IDX:0  IP-SRC (10.151.217.103|4126)  IP-DST (164.25.248.71|5000)  RX: 14,1735 
TX: 12,2196  num_f:(1)
26: IP-SRC (10.151.217.103)  IP-DST (164.25.248.71) LEN: 88
IDX:0  IP-SRC (10.151.217.103|0)  IP-DST (164.25.248.71|0)  RX: 8,635  TX:
13,1169  num_f:(1)
IDX:0  IP-SRC (00:50:56:88:34:a1|0)  IP-DST (00:00:0c:07:ac:23|0)  RX: 13,1169 
TX: 0,0  num_f:(1)
IDX:0  IP-SRC (164.25.248.71|5000)  IP-DST (10.151.217.103|4126)  RX: 14,1735 
TX: 13,2300  num_f:(1)
27: IP-SRC (164.25.248.71)  IP-DST (10.151.217.103) LEN: 104
IDX:0  IP-SRC (164.25.248.71|0)  IP-DST (10.151.217.103|0)  RX: 9,739  TX:
13,1169  num_f:(1)
IDX:1  IP-SRC (00:05:32:1a:47:82|0)  IP-DST (00:50:56:88:34:a1|0)  RX: 0,0  TX:
9,739  num_f:(1)
IDX:0  IP-SRC (10.151.217.103|4126)  IP-DST (164.25.248.71|5000)  RX: 15,1799 
TX: 13,2300  num_f:(1)
28: IP-SRC (10.151.217.103)  IP-DST (164.25.248.71) LEN: 64
IDX:0  IP-SRC (10.151.217.103|0)  IP-DST (164.25.248.71|0)  RX: 9,739  TX:
14,1233  num_f:(1)
IDX:0  IP-SRC (00:50:56:88:34:a1|0)  IP-DST (00:00:0c:07:ac:23|0)  RX: 14,1233 
TX: 0,0  num_f:(1)
IDX:0  IP-SRC (164.25.248.71|5000)  IP-DST (10.151.217.103|4126)  RX: 15,1799 
TX: 14,2371  num_f:(1)
29: IP-SRC (164.25.248.71)  IP-DST (10.151.217.103) LEN: 71
IDX:0  IP-SRC (164.25.248.71|0)  IP-DST (10.151.217.103|0)  RX: 10,810  TX:
14,1233  num_f:(1)
IDX:1  IP-SRC (00:05:32:1a:47:82|0)  IP-DST (00:50:56:88:34:a1|0)  RX: 0,0  TX:
10,810  num_f:(1)
IDX:0  IP-SRC (10.151.217.103|4126)  IP-DST (164.25.248.71|5000)  RX: 16,1932 
TX: 14,2371  num_f:(1)
30: IP-SRC (10.151.217.103)  IP-DST (164.25.248.71) LEN: 133
IDX:0  IP-SRC (10.151.217.103|0)  IP-DST (164.25.248.71|0)  RX: 10,810  TX:
15,1366  num_f:(1)
IDX:0  IP-SRC (00:50:56:88:34:a1|0)  IP-DST (00:00:0c:07:ac:23|0)  RX: 15,1366 
TX: 0,0  num_f:(1)
IDX:0  IP-SRC (164.25.248.71|5000)  IP-DST (10.151.217.103|4126)  RX: 16,1932 
TX: 15,2937  num_f:(1)
IDX:0  IP-SRC (10.151.217.103|4126)  IP-DST (164.25.248.71|5000)  RX: 17,1996 
TX: 15,2937  num_f:(1)
32: IP-SRC (10.151.217.103)  IP-DST (164.25.248.71) LEN: 64
IDX:0  IP-SRC (10.151.217.103|0)  IP-DST (164.25.248.71|0)  RX: 10,810  TX:
16,1430  num_f:(1)
IDX:0  IP-SRC (00:50:56:88:34:a1|0)  IP-DST (00:00:0c:07:ac:23|0)  RX: 16,1430 
TX: 0,0  num_f:(1)
IDX:0  IP-SRC (164.25.248.71|5000)  IP-DST (10.151.217.103|4126)  RX: 17,1996 
TX: 16,3459  num_f:(1)
IDX:0  IP-SRC (10.151.217.103|4126)  IP-DST (164.25.248.71|5000)  RX: 18,2060 
TX: 16,3459  num_f:(1)
34: IP-SRC (10.151.217.103)  IP-DST (164.25.248.71) LEN: 64
IDX:0  IP-SRC (10.151.217.103|0)  IP-DST (164.25.248.71|0)  RX: 10,810  TX:
17,1494  num_f:(1)
IDX:0  IP-SRC (00:50:56:88:34:a1|0)  IP-DST (00:00:0c:07:ac:23|0)  RX: 17,1494 
TX: 0,0  num_f:(1)
IDX:0  IP-SRC (164.25.248.71|5000)  IP-DST (10.151.217.103|4126)  RX: 18,2060 
TX: 17,3519  num_f:(1)
35: IP-SRC (164.25.248.71)  IP-DST (10.151.217.103) LEN: 60
IDX:0  IP-SRC (164.25.248.71|0)  IP-DST (10.151.217.103|0)  RX: 11,870  TX:
17,1494  num_f:(1)
IDX:1  IP-SRC (00:05:32:1a:47:82|0)  IP-DST (00:50:56:88:34:a1|0)  RX: 0,0  TX:
11,870  num_f:(1)
IDX:0  IP-SRC (164.25.248.71|5000)  IP-DST (10.151.217.103|4126)  RX: 18,2060 
TX: 18,3579  num_f:(1)
36: IP-SRC (164.25.248.71)  IP-DST (10.151.217.103) LEN: 60
IDX:0  IP-SRC (164.25.248.71|0)  IP-DST (10.151.217.103|0)  RX: 12,930  TX:
17,1494  num_f:(1)
IDX:1  IP-SRC (00:05:32:1a:47:82|0)  IP-DST (00:50:56:88:34:a1|0)  RX: 0,0  TX:
12,930  num_f:(1)
IDX:0  IP-SRC (10.151.217.103|4126)  IP-DST (164.25.248.71|5000)  RX: 19,2124 
TX: 18,3579  num_f:(1)
37: IP-SRC (10.151.217.103)  IP-DST (164.25.248.71) LEN: 64
IDX:0  IP-SRC (10.151.217.103|0)  IP-DST (164.25.248.71|0)  RX: 12,930  TX:
18,1558  num_f:(1)
IDX:0  IP-SRC (00:50:56:88:34:a1|0)  IP-DST (00:00:0c:07:ac:23|0)  RX: 18,1558 
TX: 0,0  num_f:(1)



the trace:
==========
  1   0.000000 1.1.1.20 -> 1.1.1.10 TCP 4126 > commplex-main [SYN] Seq=0 Len=0
MSS=1460
  2   0.000176 1.1.1.10 -> 1.1.1.20 TCP commplex-main > 4126 [SYN, ACK] Seq=0
Ack=1 Win=32768 Len=0 MSS=1460
  3   0.000274 1.1.1.20 -> 1.1.1.10 TCP 4126 > commplex-main [ACK] Seq=1 Ack=1
Win=64512 Len=0
  4   0.000620 1.1.1.20 -> 1.1.1.10 TCP 4126 > commplex-main [PSH, ACK] Seq=1
Ack=1 Win=64512 Len=512
  5   0.000634 1.1.1.20 -> 1.1.1.10 TCP 4126 > commplex-main [PSH, ACK] Seq=513
Ack=1 Win=64512 Len=97
  6   0.000753 1.1.1.10 -> 1.1.1.20 TCP commplex-main > 4126 [ACK] Seq=1
Ack=610 Win=32768 Len=0
  7   0.002374 1.1.1.10 -> 1.1.1.20 TCP commplex-main > 4126 [PSH, ACK] Seq=1
Ack=610 Win=32768 Len=69
  8   0.003103 1.1.1.20 -> 1.1.1.10 TCP 4126 > commplex-main [PSH, ACK] Seq=610
Ack=70 Win=64443 Len=126
  9   0.003920 1.1.1.10 -> 1.1.1.20 TCP commplex-main > 4126 [PSH, ACK] Seq=70
Ack=736 Win=32768 Len=161
 10   0.004589 1.1.1.20 -> 1.1.1.10 TDS TDS5 Query Packet
 11   0.005101 1.1.1.10 -> 1.1.1.20 TDS Response Packet
 12   0.005256 1.1.1.20 -> 1.1.1.10 TDS TDS5 Query Packet
 13   0.005660 1.1.1.10 -> 1.1.1.20 TDS Response Packet
 14   0.005797 1.1.1.20 -> 1.1.1.10 TDS TDS5 Query Packet
 15   0.006457 1.1.1.10 -> 1.1.1.20 TDS Response Packet
 16   0.006604 1.1.1.20 -> 1.1.1.10 TDS Cancel Packet
 17   0.006874 1.1.1.10 -> 1.1.1.20 TDS Response Packet
 18   0.007005 1.1.1.20 -> 1.1.1.10 TDS TDS5 Query Packet
 19   0.007606 1.1.1.10 -> 1.1.1.20 TDS Response Packet[Packet size limited
during capture]
 20   0.007716 1.1.1.20 -> 1.1.1.10 TDS Cancel Packet
 21   0.007966 1.1.1.10 -> 1.1.1.20 TDS Response Packet
 22   0.008095 1.1.1.20 -> 1.1.1.10 TDS TDS5 Query Packet
 23   0.009021 1.1.1.10 -> 1.1.1.20 TDS Response Packet (Not last
buffer)[Packet size limited during capture]
 24   0.186587 1.1.1.20 -> 1.1.1.10 TCP 4126 > commplex-main [ACK] Seq=912
Ack=1069 Win=63444 Len=0
 25   0.186815 1.1.1.10 -> 1.1.1.20 TDS Response Packet[Packet size limited
during capture]
 26   0.187198 1.1.1.20 -> 1.1.1.10 TDS TDS5 Query Packet
 27   0.188510 1.1.1.10 -> 1.1.1.20 TDS Response Packet
 28   0.188732 1.1.1.20 -> 1.1.1.10 TDS Cancel Packet
 29   0.189045 1.1.1.10 -> 1.1.1.20 TDS Response Packet
 30   0.197053 1.1.1.20 -> 1.1.1.10 TDS TDS5 Query Packet
 31   0.198788 1.1.1.10 -> 1.1.1.20 TDS Response Packet (Not last
buffer)[Packet size limited during capture]
 32   0.405664 1.1.1.20 -> 1.1.1.10 TCP 4126 > commplex-main [ACK] Seq=1033
Ack=2114 Win=63933 Len=0
 33   0.405880 1.1.1.10 -> 1.1.1.20 TDS Response Packet[Packet size limited
during capture]
 34   0.414072 1.1.1.20 -> 1.1.1.10 TCP 4126 > commplex-main [FIN, ACK]
Seq=1033 Ack=2582 Win=63465 Len=0
 35   0.414169 1.1.1.10 -> 1.1.1.20 TCP commplex-main > 4126 [ACK] Seq=2582
Ack=1034 Win=32768 Len=0
 36   0.415048 1.1.1.10 -> 1.1.1.20 TCP commplex-main > 4126 [FIN, ACK]
Seq=2582 Ack=1034 Win=0 Len=0
 37   0.415198 1.1.1.20 -> 1.1.1.10 TCP 4126 > commplex-main [ACK] Seq=1034
Ack=2583 Win=63465 Len=0

the same behavior i found with the windows-version.


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.