Hello, I have an issue with slow FTP transfer in one direction so I captured on both ends. The sending server shows total packets 120k while receiver shows 150k total packets. Those numbers come from the TCP stream so am I doing something wrong or how can there be more on the receiving side? I did add the filter tcp.analysis.lost_segment to each capture and the sender shows 25 packets while receiver shows 1700.
Thanks
Perhaps TCP segmentation offload (TSO)
To further Sake's answer: Are the packets in each capture different sizes? The 120K packets may be larger than 1460 (due to TSO) whereas the 150K packets might all be ~1460 bytes because they represent what actually went on the wire.
Put another way, is the total payload in all packets the same for both ends?
Asked: 2023-03-15 13:33:18 +0000
Seen: 102 times
Last updated: Mar 15 '23
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.
