Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

Drawing actual TCP window size in Wireshark

I'm wondering if it's possible to draw in wireshark the actual size of TCP window (amount of unacknowledged data sent). I'm aware of Statistics/TCP Stream graphs/Window scaling but to me understanding it draws maximum TCP window allowed by receiver and the actual amount of unacknowledged data sent be sender could be lower.

That's how I think it could be calculated:

-If the capture was done on receiver end the window size would be amount of data sent in a time window equal to RTT.

-If the capture was done on a sender end that would be amount of data sent since the last acknowledged packet.

Drawing actual TCP window size in Wireshark

I'm wondering if it's possible to draw in wireshark the actual size of TCP window (amount of unacknowledged data sent). I'm aware of Statistics/TCP Stream graphs/Window scaling but to me my understanding it draws maximum TCP window allowed by receiver and the actual amount of unacknowledged data sent be sender could be lower.

That's how I think it could be calculated:

-If the capture was done on receiver end the window size would be amount of data sent in a time window equal to RTT.

-If the capture was done on a sender end that would be amount of data sent since the last acknowledged packet.

Drawing actual TCP window size in Wireshark

I'm wondering if it's possible to draw in wireshark the actual size of TCP window (amount of unacknowledged data sent). I'm aware of Statistics/TCP Stream graphs/Window scaling but to my understanding it draws maximum TCP window allowed by receiver and the actual amount of unacknowledged data sent be sender could be lower.

That's how I think it could be calculated:

-If

  • If the capture was done on receiver receiver end the window size would be amount amount of data sent in a time window equal equal to RTT.

  • -If

  • If the capture was done on a
    sender end that would be amount of
    data sent since the last acknowledged acknowledged packet.

Drawing actual TCP window size in Wireshark

I'm wondering if it's possible to draw in wireshark the actual size of TCP window (amount of unacknowledged data sent). I'm aware of Statistics/TCP Stream graphs/Window scaling but to my understanding it draws maximum TCP window allowed by receiver and the actual amount of unacknowledged data sent be sender could be lower.

That's how I think it could be calculated:

  • If the capture was done on receiver end the window size would be amount of data sent in a time window equal to RTT.
  • If the capture was done on a
    sender end that would be amount of
    data sent since the last acknowledged packet.