What's the hook and double hook meaning in wireshark?

enter image description here

enter image description here

you see the two snapshots up there, when I select #7 the #6 will be hooked. when I select the #8, the #5 will be double hooked.

What's the meaning of those?

1 Answer 1


The single check mark is the ACKnowledgement for the selected packet (obviously you've got an ordering problem here). The double check mark is a duplicate acknowledgment for the selected packet.

You can find out all about Wireshark's Packet List Pane in the help 3.17 The "Packet List" Pane.

  • You see the time order problem, is it mean maybe this is a ACK attack?
    – aircraft
    Commented Aug 29, 2019 at 6:41
  • That's a completely different question and impossible to answer without much more information (unlikely IMHO).
    – Zac67
    Commented Aug 29, 2019 at 6:49

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.