Question about TCP packets, or reasamble tcp stream

[jvds]

i was playing around with the UDF winpcapau3 capturing http data and some http streams are split into different packets

but sometimes they do not arrive in the right order,

will the first packet always come first or is there a chance that the first packed with the stream can come after the second packet?

I want to search for packets with ACK flag and an http header to start capturing the stream, and stop capture when the PSH/ACK packet arrives, my problem is that if the second packet arrives first then it will not be captured and then when the first and rest of the packets arrive, the captured stream wont be complete

[BrewManNH]

With TCP, packets can come in any order, it's up to the receiving end to reorder them and present them to the whatever is reading that stream. So capturing packets as they come in could result in out of order packets, the TCP stack will do the reordering, and you would read that from the socket layer.