Home page logo
/

wireshark logo Wireshark mailing list archives

Re: Question about ACK number
From: Amit Aggarwal <amit.agg () samsung com>
Date: Mon, 15 Apr 2013 17:01:27 +0900

Thanks Sake Blok J

 

Best Regards

Amit Aggarwal 

+82 10 3383 8499 

 

From: wireshark-users-bounces () wireshark org
[mailto:wireshark-users-bounces () wireshark org] On Behalf Of Sake Blok
Sent: Monday, April 15, 2013 4:25 PM
To: Community support list for Wireshark
Subject: Re: [Wireshark-users] Question about ACK number

 

Hello Amit,

 

Yes, this is normal. Before the data stream and after the data stream, there
is 1 phantom byte. So the first data packets has a sequence number that is 1
higher than the initial sequence number and after the FIN, there is also one
phantom byte. This makes it possible to make a certain that the FIN was seen
and not just the last data byte.

 

See the RFC at http://tools.ietf.org/html/rfc793

 

Cheers,

Sake

 

 

On 15 apr 2013, at 09:10, Amit Aggarwal wrote:





Hello,

 

Please help to comment about ACK calculation in below scenario.

 

Frame100: Client ACKs the data received till now..  ACK= 10000

 

Frame 101:  Server sends client TCP Data ( 924 bytes) with FIN,PSH and ACK
flags set.

 

Frame 102: Client sends ACK= 10925    à QUESTION ..Why is client sending
10925 and not 10924 .. Is it adding 1 for FIN received in Frame 101 ..?  Is
it normal ?

 

Frame 103:  Client sends FIN,ACK == ACK = 10925

 

Best Regards

Amit

 

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
            mailto:wireshark-users-request () wireshark org?subject=unsubscribe

 

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]