Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

You need take into consideration where the packets get captured. This typically happens at layer 2 or layer 3 within an operating system. The ACKs which is the basis of wireshark's RTT calculations is sent by layer 4 of the OSI model .
The 0.00207 seconds is the time between the trace tool saw the SYN_ACK and the time the ACK completing the 3-way-handshake was seen.
Assuming the trace was taken at the client, the 209 ┬Ás is the internal RTT within the operating system,
the 60.792 is the round-trip-time through the network (+ the remote internal RTT) . Regards Matthias