Ask Your Question

Revision history [back]


This is not really a Wireshark question per se but I'll bite.

I think most of my fellow network engineers would say, "It depends."

Ideally, there would never be any packet loss or host with zero window. (These two issues are not really related just so you know.) But in the real world, this is not possible. Packet loss is a fact of (network) life. Furthermore, you want your hosts to be able to tolerate "some" packet loss. Any application that doesn't tolerate packet loss is buggy as far as I'm concerned.

So my answer is normally there should be no packet loss or zero window events but still expect them once in a while. (And investigate!)