 | 1 | initial version |
You need take into consideration where the packets get captured.
This typically happens at layer 2 or layer 3 within an operating system. The ACKs which is the basis of wireshark's RTT calculations is sent by layer 4 of the OSI model .
The 0.00207 seconds is the time between the trace tool saw the SYN_ACK and the time the ACK completing the 3-way-handshake was seen.
Assuming the trace was taken at the client, the 209 µs is the internal RTT within the operating system,
the 60.792 is the round-trip-time through the network (+ the remote internal RTT)
.
Regards Matthias
