Непонятное поведение wireshark

0

2

Почему-то wireshark решил при захвате нарушить сортировку пакетов по времени поступления (см. ниже пакеты 470 и 471, wireshark запускали на 89.204.251.127). Кто-нибудь может это объяснить?

Если это важно - на 89.204.251.127 gentoo, ядро 2.6.39-rc2-git2, интернет через ppp0 (mobile broadband).

Правильно ли я понимаю, что жалоба на TCP Previous segment lost и последующий TCP Retransmission необоснована?

No.     Time        Source                Destination           Protocol Info
    468 5.162199    89.204.251.127        90.151.25.248         TCP      50685 > ssh [ACK] Seq=193 Ack=381673 Win=12291 Len=0 TSV=29662086 TSER=29598234

Frame 468: 68 bytes on wire (544 bits), 68 bytes captured (544 bits)
Linux cooked capture
Internet Protocol, Src: 89.204.251.127 (89.204.251.127), Dst: 90.151.25.248 (90.151.25.248)
Transmission Control Protocol, Src Port: 50685 (50685), Dst Port: ssh (22), Seq: 193, Ack: 381673, Len: 0

No.     Time        Source                Destination           Protocol Info
    469 5.163276    90.151.25.248         89.204.251.127        SSH      Encrypted response packet len=1368

Frame 469: 1436 bytes on wire (11488 bits), 1436 bytes captured (11488 bits)
Linux cooked capture
Internet Protocol, Src: 90.151.25.248 (90.151.25.248), Dst: 89.204.251.127 (89.204.251.127)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 50685 (50685), Seq: 381673, Ack: 193, Len: 1368
SSH Protocol

No.     Time        Source                Destination           Protocol Info
    470 5.163302    90.151.25.248         89.204.251.127        SSH      [TCP Previous segment lost] Encrypted response packet len=1368

Frame 470: 1436 bytes on wire (11488 bits), 1436 bytes captured (11488 bits)
Linux cooked capture
Internet Protocol, Src: 90.151.25.248 (90.151.25.248), Dst: 89.204.251.127 (89.204.251.127)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 50685 (50685), Seq: 384409, Ack: 193, Len: 1368
SSH Protocol

No.     Time        Source                Destination           Protocol Info
    471 5.163279    90.151.25.248         89.204.251.127        SSH      [TCP Retransmission] Encrypted response packet len=1368

Frame 471: 1436 bytes on wire (11488 bits), 1436 bytes captured (11488 bits)
Linux cooked capture
Internet Protocol, Src: 90.151.25.248 (90.151.25.248), Dst: 89.204.251.127 (89.204.251.127)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 50685 (50685), Seq: 383041, Ack: 193, Len: 1368
SSH Protocol

No.     Time        Source                Destination           Protocol Info
    472 5.163337    89.204.251.127        90.151.25.248         TCP      50685 > ssh [ACK] Seq=193 Ack=383041 Win=12291 Len=0 TSV=29662088 TSER=29598254 SLE=384409 SRE=385777

Frame 472: 80 bytes on wire (640 bits), 80 bytes captured (640 bits)
Linux cooked capture
Internet Protocol, Src: 89.204.251.127 (89.204.251.127), Dst: 90.151.25.248 (90.151.25.248)
Transmission Control Protocol, Src Port: 50685 (50685), Dst Port: ssh (22), Seq: 193, Ack: 383041, Len: 0

Ссылка

Похожие темы