Forum Discussion
kridsana
Cirrocumulus
CirrocumulusTCP previous segment lost
From this tcpdump
12.12.12.12 is ip client , 100.100.100.13 is ip Virtual server
12.12.12.12 100.100.100.13 TCP 66 4204 > http [SYN] Seq=0 Win=65535 L...
kridsanaCirrocumulus
CirrocumulusWas this at the beginning/start of a capture? Wireshark will mark a segment as missing if it receives a ACK for something it did not see. This is a common occurrence when first staring a tcpdump.
no, it's just begining of tcp stream , handshake + send packet. and wireshark mark previous segment lost when a packet arrives with a sequence number greater than the "next expected sequence number" on that connection. but no retransmit happen.
