Wireshark · Wireshark-users: Re: [Wireshark-users] how to get round trip time and identify FIN-ACK and ACK pairs

[nangergong <nangergong@xxxxxxxxx>]

with tshark, is it possible to get the seq number and ack number if the packets are with sock protocol
I can see the seq number and ack number from wireshark
but with tshark, how to get seq number and ack number?

On Thu, Jun 21, 2012 at 12:00 PM, esolve esolve <esolvepolito@xxxxxxxxx> wrote:

so nobody has any idea?
the intuitive idea is to use sequence number/ack number, but it may be a bit troublesome, any other ideas? thanks

2012/6/20 esolve esolve <esolvepolito@xxxxxxxxx>

Hi, all,

 I want to get round trip time distribution from a pcap file.  My
idea is to compute each round trip time for each pair of data packets
and ack  packets. But the difficulty is to identify the pairs, namely,
for each data packet(ack packet) I need to find the corresponding ack
packet(data packet). How can I achieve this?

  Besides, for the find tcp tear-down process, how to identify each
FIN-ACK and ACK pair? thanks!

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
            mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe