 | 1 | initial version |
The Zero Window is coming after each side has done their FIN/ACK so not an issue.
Data continues to flow on the other open connections/streams.
TCP Streams: 3, 23, 43, 44, 71, 76, 81, 90, 104, 110, 159
23, 110: sent from 10.65.142.158
All others sent from 192.168.119.7
The Zero Window only occurs for ports 475 or 2525.
There are 98 streams closed (FIN/ACK) for those ports and 11 of those with Zero Window warning.
(tcp.port==475 or tcp.port==2525) and tcp.flags.fin==1
So about 10% of the time you get a Zero Window but it's after the stream/connection is closed.
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.