See the WSUG - 7.5. TCP Analysis:
TCP ZeroWindow
OK I have read this and if my understanding is correct its the IP address 192.168.10.15 that is saying it has a Zero Window Size
TCP ZeroWindow Set when the receive window size is zero and none of SYN, FIN, or RST are set.
The window field in each TCP header advertises the amount of data a receiver can accept. If the receiver can’t accept any more data it will set the window value to zero, which tells the sender to pause its transmission. In some specific cases this is normal — for example, a printer might use a zero window to pause the transmission of a print job while it loads or reverses a sheet of paper. However, in most cases this indicates a performance or capacity problem on the receiving end. It might take a long time (sometimes several minutes) to resume a paused connection ...
It's a bit confusing with the terms "sender"/"receiver" and "source/destination".
The text you provided shows that the "source" (192.168.10.11) sent a message telling the "sender" (192.168.10.15) that it could not receive any more data at this time.
Look down in the packet details. It's the "0" value for Window that Wireshark interprets as a "Zero Window".
Window: 0
[Calculated window size: 0]
[Window size scaling factor: 4]
Asked: 2024-01-03 10:17:59 +0000
Seen: 117 times
Last updated: Jan 03
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.
