Seeing duplicate acknowledgments

In a normal TCP conversation, the client acknowledges every byte received by transmitting an acknowledgment, with the ACK field value set as the next expected byte. When more than one acknowledgment is sent by the client (with the same ACK field value), this is said to be a duplicate acknowledgment.

To understand what a duplicate acknowledgment is, let's step through a standard TCP transaction:

  1. In the course of a normal TCP data transaction, TCP sequences and acknowledges every byte of data.
  2. The client acknowledges the data received by setting the ACK flag in the TCP header, as shown here:

The TCP-ACK flag ...

Get Learn Wireshark - Fundamentals of Wireshark now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.