a Window Scale value on a client of "-1"

asked 2024-03-28 20:34:13 +0000

kmnruser
3 ●1 ●1 ●2

I have captured data from an end user as he connects to his server. The connection will drop a few times a day.

As i am gathering data and analyzing it in Wireshark, i see something that may be an anomoly.

I see the field for Window Scale sizing factor on the client, and it is set to -1. I am not sure and have yet to find anything on it by searching.

Has anyone else ever seen a Windows scale size set this way?

Thanks in advance, KMNRuser

edit retag flag offensive close merge delete

add a comment

Comments

On top of that, a scaling factor of -2 means the SYN and SYN/ACK were indeed seen, but no WS option was seen in the SYN or the SYN/ACK, so -2 means: "No Window Scaling used"

SYN-bit ( 2024-03-28 21:05:43 +0000 )edit

On the wiki: TCP Relative Sequence Numbers & TCP Window Scaling

Chuckc ( 2024-03-28 23:44:46 +0000 )edit

add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

a Window Scale value on a client of "-1"

1 Answer

Comments

Your Answer

Question Tools

Stats

a Window Scale value on a client of "-1" edit

1 Answer

Comments

Your Answer

Question Tools

Stats

a Window Scale value on a client of "-1"