Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

I wasn't unable to download the pcap. Adding a column for bytes-in-flight or tcptrace graph might help visually. Wireshark tracks bytes-in-flight and the window size. Wireshark "TCP Window Full" is Wireshark's way of saying that the sender can't send any more data because it has fill the advertised window.

Frame 44967, Wireshark is saying can't send any more data because it has filled advertised window. The client,, has to wait for an update from before it can send more data. Frame 44968, is advertising the window size 0. Don't send me any data. Frame 44969, sends TCP Keep-Alive because it is waiting for to an update. Also, this ensures it didn't miss the update. Frame 46149, updates its window size. starts sending data again.

I suggest increasing the window size for If that isn't possible, find out why it's having problems processing packets.