http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1725
Summary: Enhance tcp-analysis with "reused tcp session"
Product: Wireshark
Version: SVN
Platform: All
OS/Version: All
Status: NEW
Severity: Enhancement
Priority: Low
Component: Wireshark
AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
ReportedBy: sake@xxxxxxxxxx
Build Information:
n/a
--
When a new tcp-session is using the same ips and ports as a previous
tcp-session, it is currently marked as "Lost Packet". This patch adds another
seq-analysis-flag to mark these frames as "Reused Session".
Background info:
F5 loadbalancers (amongst others) try to preserve the client-ports when
forwarding traffic to the backend servers. If you also enable source-natting,
there is a high chance that you end up having multiple tcp-sessions with the
same ips and ports in one trace-file. This gives wrong statistics for "lost
packets".
--
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.