Wireshark-users: Re: [Wireshark-users] tcp errors detection
From: M K <gedropi@xxxxxxxxx>
Date: Sun, 18 Apr 2010 07:56:17 -0800
Also just go to the menu item Analyze>Expert Info.  Click on a, for
example, Retransmission row inside the Expert Infos box and it will
take you to the exact location within the pcap.

On 4/18/10, Abhik Sarkar <sarkar.abhik@xxxxxxxxx> wrote:
> Hi Victor,
>
> Have a look at this page: http://www.wireshark.org/docs/dfref/t/tcp.html
>
> You can use display filter on the following fields:
> tcp.analysis.retransmission
> tcp.analysis.fast_retransmission
> tcp.checksum_bad
>
> For TCP checksums, please also refer to this page:
> http://wiki.wireshark.org/TCP_Checksum_Verification
> For retransmissions, also refer to this page:
> http://wiki.wireshark.org/PacketLoss
>
> HTH
> Abhik.
>
> On Sun, Apr 18, 2010 at 4:17 PM, Victor lyamtsev <vlyamtsev@xxxxxxxxx>wrote:
>
>> Hi,
>>
>>  how can i locate retransmission error for TCP sequence in wireshark
>> capture ?
>> Should I look for ACK with repeated sequence number ?
>> For example:
>>
>> [ACK] Seq = 1355 Ack = 13409 ...
>> [ACK] Seq = 1355 Ack = 13500
>>
>> How can i detect checksum errors from the capture ?
>>
>> Thanks,
>> -vvv
>> ___________________________________________________________________________
>> Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
>> Archives:    http://www.wireshark.org/lists/wireshark-users
>> Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
>>             mailto:wireshark-users-request@xxxxxxxxxxxxx
>> ?subject=unsubscribe
>>
>


-- 
All that is necessary for evil to succeed is that good men do nothing.

              ~Edmund Burke