 | 1 | initial version |
Regarding the packet length:
In the posted image frame number 67 (SYN/ACK) shows a Maximum Segment Size (MSS) of 1430 bytes. So the maximum size used is: 1430 (data) + 20 (TCP) + 20 (IP) + 14 (Eth) = 1484 bytes.
Regarding the window size:
The same frame also shows a Window Scale (WS) of 256 or 'shift by 8'. So actually the maximum window size is not small (16 MB). The picture shows that it starts small and increases during the TLS handshake. Just look up "TCP slow start".
The size of packets with encrypted "Application Data" is mainly determined by the application that runs on top of TCP/TLS. Maybe just small web-requests over https?
