Re: match packets at sender and receiver

[Andrej van der Zee <andrejvanderzee () gmail com>]

Hi,


> In a single 1.7GB cap-file with 17424367 TCP packets I get 27
> identical packets based on the above id.

Note that the identical packages always have packet-length 54 or 60,
so I guess it is some kind of acknowledge packet. Not sure though as I
am not very familiar with the TCP protocol internals.

Cheers,
Andrej
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe