Wireshark: Capturing Re-transmissions for Specific Host
Here is a little tip when working with Wireshark to diagnose problems with traffic flow to a remote host. This filter command shows resent TCP packets for a remote host.
ip.addr eq remote.example.com and (tcp.analysis.retransmission or tcp.analysis.fast_retransmission)
Replace remote.example.com with the name or ip address of the remote host.
Leave a comment