Wireshark mailing list archives

question about TCP flow behavior


From: Boaz Galil <boaz20 () gmail com>
Date: Fri, 16 Apr 2010 05:12:21 -0400

Dear Experts,



I am trying to review a TCP flow using wire shark (I have removed the
“relative seq for TCP”).

My questions are this:

During the TCP flow I see the following:

Server A sends Server B [PSH,ACK] seq=1058555096 ACK=2917173962

Server B sends Server A [ACK] seq=2917173962 ACK=1058555108

Server A sends Server B [PSH,ACK] seq=1058555108, ACK=2917173962

Server B sends Server A [ACK] seq=2917173962 ACK=1058556516

And so on, so Server B always sends ACK on a sequence with higher number…

Does anyone know what the explanation of this behavior is? Is this a normal
TCP flow behavior?



Please don’t hesitate to contact me if you have any questions or comments.

Thanks in advance,



Boaz Galil


-- 
Boaz.
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe

Current thread: