1

What's the hook and double hook meaning in wireshark?

enter image description here

enter image description here

you see the two snapshots up there, when I select #7 the #6 will be hooked. when I select the #8, the #5 will be double hooked.

What's the meaning of those?

1

The single check mark is the ACKnowledgement for the selected packet (obviously you've got an ordering problem here). The double check mark is a duplicate acknowledgment for the selected packet.

You can find out all about Wireshark's Packet List Pane in the help 3.17 The "Packet List" Pane.

2
  • You see the time order problem, is it mean maybe this is a ACK attack?
    – aircraft
    Aug 29 '19 at 6:41
  • That's a completely different question and impossible to answer without much more information (unlikely IMHO).
    – Zac67
    Aug 29 '19 at 6:49

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.