For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

kridsana's avatar
kridsana
Icon for Cirrocumulus rankCirrocumulus
Jan 18, 2013

TCP previous segment lost

From this tcpdump     12.12.12.12 is ip client , 100.100.100.13 is ip Virtual server     12.12.12.12 100.100.100.13 TCP 66 4204 > http [SYN] Seq=0 Win=65535 L...
config
design
kridsana's avatar
kridsana
Icon for Cirrocumulus rankCirrocumulus
Jan 23, 2013
Was this at the beginning/start of a capture? Wireshark will mark a segment as missing if it receives a ACK for something it did not see. This is a common occurrence when first staring a tcpdump.

 

 

 

no, it's just begining of tcp stream , handshake + send packet. and wireshark mark previous segment lost when a packet arrives with a sequence number greater than the "next expected sequence number" on that connection. but no retransmit happen.