["Zachary J. Ziemba" <zach.ziemba@xxxxxxxxxxxxxxxxxxxx>]

Hi,

 

Can anyone offer a potential scenario that would explain why the highlighted packets are occurring in a stream that they do not appear to correspond to? I’m new to analyzing network traffic and can’t understand why the sequence number would transition in such a way mid-connection. Wireshark lists these packets as Previous Segment Lost/Retransmission but they appear to be unrelated to the connection.

 

Thanks in advance,

 

Zach

Attachment: tcp_retransmission_issue.xlsx
Description: tcp_retransmission_issue.xlsx