{"id":266,"date":"2023-10-26T09:54:59","date_gmt":"2023-10-26T17:54:59","guid":{"rendered":"https:\/\/www.dumpsterfirecomputing.com\/?p=266"},"modified":"2023-10-26T09:55:00","modified_gmt":"2023-10-26T17:55:00","slug":"wireshark-workbook-lab-6","status":"publish","type":"post","link":"https:\/\/www.dumpsterfirecomputing.com\/?p=266","title":{"rendered":"Wireshark Workbook &#8211; Lab 6"},"content":{"rendered":"\n<p>This was a really fun couple of labs for me (challenging as well).  Lab 5 was all about TCP Sequence and Acknowledgment numbers, and it wasn&#8217;t until this lab and its set of questions around Retransmissions and Out-of-Order packets that it really sunk for me.  I&#8217;m still by no means an expert&#8230;<\/p>\n\n\n\n<p>These sets of labs took me down some fun and interesting rabbit holes, and I had to be careful that I didn&#8217;t dig too deep.  There&#8217;s decades worth of information on the topic, and it can be easy sometimes to really get squirreled on things.  I found <a href=\"https:\/\/blog.packet-foo.com\/2014\/07\/determining-tcp-initial-round-trip-time\/\">this blog post<\/a> useful when I was doing some reading and research on Round-Trip Times, Initial Round-Trip Times, and why it&#8217;s important.  T<a href=\"https:\/\/www.baeldung.com\/cs\/tcp-retransmission-rules\">his other post<\/a> was similar and informative.  I even went so far as to peruse the <a href=\"https:\/\/www.rfc-editor.org\/rfc\/rfc6298\">RFC<\/a> on how TCP compute&#8217;s the retransmission timer!<\/p>\n\n\n\n<p>One thing I&#8217;ve always enjoyed about networking and packet analysis is that while the technologies above the network layer are changing constantly, the packets are always there.  TCP hasn&#8217;t drastically changed in a very long time.  The core concepts and terminology have largely remained the same, and it feels like it&#8217;s an area that not a lot of people understand still.  This is what&#8217;s driving me through this work &#8211; I want to understand it.<\/p>\n\n\n\n<p>I&#8217;m going to sit and think about some of this over the next few days before moving into the next lab.  Between the Sequence \/ Acknowledgment numbers, how to calculate them, identifying the &#8216;Next Sequence Number&#8217;, and then knowing how Wireshark determines when a packet is a Fast Retransmit, an Out of Order, or a Retransmit, there&#8217;s a lot of new and interesting information that needs to be fully absorbed.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>This was a really fun couple of labs for me (challenging as well). Lab 5 was all about TCP Sequence and Acknowledgment numbers, and it wasn&#8217;t until this lab and [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[54],"tags":[],"class_list":["post-266","post","type-post","status-publish","format-standard","hentry","category-learning"],"_links":{"self":[{"href":"https:\/\/www.dumpsterfirecomputing.com\/index.php?rest_route=\/wp\/v2\/posts\/266","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.dumpsterfirecomputing.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dumpsterfirecomputing.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dumpsterfirecomputing.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dumpsterfirecomputing.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=266"}],"version-history":[{"count":1,"href":"https:\/\/www.dumpsterfirecomputing.com\/index.php?rest_route=\/wp\/v2\/posts\/266\/revisions"}],"predecessor-version":[{"id":268,"href":"https:\/\/www.dumpsterfirecomputing.com\/index.php?rest_route=\/wp\/v2\/posts\/266\/revisions\/268"}],"wp:attachment":[{"href":"https:\/\/www.dumpsterfirecomputing.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=266"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dumpsterfirecomputing.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=266"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dumpsterfirecomputing.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=266"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}