My Question is related to the post below:-
https://osqa-ask.wireshark.org/questions/36657/tcp-window-scaling-handshake-and-data-traffic-difference
You may use below filter to see the details:-
(ip.addr eq 192.168.0.105 and ip.addr eq 103.243.221.51) and (tcp.port eq 56382 and tcp.port eq 443)
Please help me understand that in 58 segment, why TCP shows -2 window scaling factor while server did not specify it in the handshake.
For some reason I am not able to upload the PCAP file. Is there any place I could upload it as I get the error that I need to have > 60 points to upload a file.
