Pages

10/19/2015

How to Do TCP Sequence Number Analysis

How to Do TCP Sequence Number Analysis

From packetbomb.com
  • TCP typically ACKs every other segment
  • Add sequence number, next sequence number, and acknowledgment number to your Wireshark columns
  • Next sequence number is sequence number plus TCP data payload length
  • ACK number tells you what data has been received and what the next received sequence number should be
  • TCP will ACK every packet when in recovery


  • No comments: