Wireshark-users: Re: [Wireshark-users] match packets at sender and receiver

From: Andrej van der Zee <andrejvanderzee@xxxxxxxxx>
Date: Tue, 20 Apr 2010 17:33:59 +0900
Hi,


>
> In a single 1.7GB cap-file with 17424367 TCP packets I get 27
> identical packets based on the above id.
>

Note that the identical packages always have packet-length 54 or 60,
so I guess it is some kind of acknowledge packet. Not sure though as I
am not very familiar with the TCP protocol internals.

Cheers,
Andrej