Set when the current sequence number is greater than the next expected sequence number. Set when the SYN flag is set (not SYN+ACK), we have an existing conversation using the same addresses and ports, and the sequence number is different than the existing conversation’s initial sequence number. The threshold is either the value shown in the “iRTT” (_rtt) field under “SEQ/ACK analysis” if it is present, or the default value of 3ms if it is not. The last segment arrived within the Out-Of-Order RTT threshold.
The next expected sequence number and the next sequence number differ. The next expected sequence number is greater than the current sequence number. In the forward direction, the segment length is greater than zero or the SYN or FIN is set.
0 kommentar(er)
