TCP ACK with 1460 Bytes of Data

asked 2019-08-30 17:21:09 +0000

sigrant gravatar image

updated 2019-08-30 17:22:05 +0000

Hi folks- I have a capture (from a tcpdump) and I see that at different periods I have a unit that will send a burst of late ACKs all in a row and I am seeing that these packets also all have 1460 bytes of data in them. The normal ACKs in this enviro have no bytes in the data field. Just curious what causes ACKs to store, increment, or otherwise populate the data field? Thanks, g

edit retag flag offensive close merge delete

Comments

Do you have a pcap file you could share?

Jasper gravatar imageJasper ( 2019-09-01 21:33:12 +0000 )edit

In the meantime, maybe have a look at RFC 793 - Transmission Control Protocol?

cmaynard gravatar imagecmaynard ( 2019-09-06 13:26:18 +0000 )edit
add a comment