Re: how to get round trip time and identify FIN-ACK and ACK pairs

[nangergong <nangergong () gmail com>]

with tshark, is it possible to get the seq number and ack number if the
packets are with sock protocol
I can see the seq number and ack number from wireshark
but with tshark, how to get seq number and ack number?

On Thu, Jun 21, 2012 at 12:00 PM, esolve esolve <esolvepolito () gmail com>wrote:

> so nobody has any idea?
> the intuitive idea is to use sequence number/ack number, but it may be a
> bit troublesome, any other ideas? thanks
>
>
> 2012/6/20 esolve esolve <esolvepolito () gmail com>
>
> > Hi, all,
> >
> >  I want to get round trip time distribution from a pcap file.  My
> > idea is to compute each round trip time for each pair of data packets
> > and ack  packets. But the difficulty is to identify the pairs, namely,
> > for each data packet(ack packet) I need to find the corresponding ack
> > packet(data packet). How can I achieve this?
> >
> >   Besides, for the find tcp tear-down process, how to identify each
> > FIN-ACK and ACK pair? thanks!
>
>
> ___________________________________________________________________________
> Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
> Archives:    http://www.wireshark.org/lists/wireshark-users
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
>             mailto:wireshark-users-request () wireshark org
> ?subject=unsubscribe
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe