CODEWITHSUNDEEP
httptcpwireshark
sooglejay
sooglejay

Reputation: 1375

How To know the Size of HTTPS or HTTP Packets except for Retransmission

It's about HTTP(s) or TCP protocol.

I am learning HTTP using Wireshark, I see lots of retransmission packets in TCP protocol. And I want to calculate the total size of data sent by client-end to server-end, except for retransmission.

How can I get the whole pure size of data I sent to server, except retransmission?

Is there any flag for retransmission in TCP protocol?

Upvotes: 0

Views: 862

Answers (1)

Malt
Malt

Reputation: 30285

There's no "retransmission" flag it TCP. Finding retransmissions requires analyzing the sequence numbers of sent segments, which is something wireshark does - for instance, you can use the display filter tcp.analysis.retransmission to find TCP segments that wireshark considers to be retransmissions.

To find the amount of data sent in a tcp session, right click any segment from the session, and click Follow -> TCP Stream:

enter image description here

It'll generate a display filter such as tcp.stream eq 138 and show you the entire content of the selected tcp session, including the amount of shared data, regardless of retransmissions:

enter image description here

Upvotes: 1

Related Questions