Eu acredito que você pode usar o Wireshark para determinar por que esses pacotes estão sendo retransmitidos. Extraído deste tópico no fórum do Wireshark, intitulado: Usuários do Wireshark: Re: [usuários do Wireshark] detecção de erros de tcp .
trecho # 1
On Sun, Apr 18, 2010 at 4:17 PM, Victor lyamtsev wrote:
Hi,
how can i locate retransmission error for TCP sequence in wireshark capture ? Should I look for ACK with repeated sequence number ? For example:
[ACK] Seq = 1355 Ack = 13409 ... [ACK] Seq = 1355 Ack = 13500
How can i detect checksum errors from the capture ?
Thanks, -vvv
trecho # 2
Also just go to the menu item Analyze>Expert Info. Click on a, for
example, Retransmission row inside the Expert Infos box and it will
take you to the exact location within the pcap.
On 4/18/10, Abhik Sarkar <sarkar.abhik@xxxxxxxxx> wrote:
> Hi Victor,
>
> Have a look at this page: http://www.wireshark.org/docs/dfref/t/tcp.html
>
> You can use display filter on the following fields:
> tcp.analysis.retransmission
> tcp.analysis.fast_retransmission
> tcp.checksum_bad
>
> For TCP checksums, please also refer to this page:
> http://wiki.wireshark.org/TCP_Checksum_Verification
> For retransmissions, also refer to this page:
> http://wiki.wireshark.org/PacketLoss
>
> HTH
> Abhik.
>
> On Sun, Apr 18, 2010 at 4:17 PM, Victor lyamtsev <vlyamtsev@xxxxxxxxx>wrote:
>
>> Hi,
>>
>> how can i locate retransmission error for TCP sequence in wireshark
>> capture ?
>> Should I look for ACK with repeated sequence number ?
>> For example:
>>
>> [ACK] Seq = 1355 Ack = 13409 ...
>> [ACK] Seq = 1355 Ack = 13500
>>
>> How can i detect checksum errors from the capture ?
>>
>> Thanks,
>> -vvv
Os principais recursos desse segmento:
Você vai querer ir abaixo de "Expert Info" no menu suspenso Analyze, a partir daí, se você estiver capturando pacotes, você verá várias retransmissões quando isso se correlacionará com seus erros.