OSQA is unmaintained. Help us figure out where to go from here.

Hi. Is there a way to graph packets' window size. What I want to do is to see how TCP stream's receive window size changes in the I/O graph. I'm aware of the tcp.window_size and tcp.window_size_value filters but those just graph every packet that has any window size in the first place. Thanks.

-Rakki

asked 14 Nov '12, 00:55

rakki's gravatar image

rakki
0558
accept rate: 0%

If you want to plot the value of a field, you can do this with the advanced plot features in the I/O Graph dialog.

(26 Apr '15, 02:38) Christian_R

did you try this?

Statistics -> TCP Stream Graph -> Window Scaling Graph

Regards
Kurt

permanent link

answered 14 Nov '12, 01:23

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.7k1037236
accept rate: 15%

Exactly what I was looking for. Thanks, Kurt.

(14 Nov '12, 01:43) rakki

If a supplied answer resolves your question can you please "accept" it by clicking the checkmark icon next to it. This highlights good answers for the benefit of subsequent users with the same or similar questions.

(14 Nov '12, 07:45) Kurt Knochner ♦

Besides the answer of @Kurt: you can see also the Window size in the TCP Time-Sequence Graph when choosing the tcptrace style. The window size is the line above the actual sequence number line, and in that graph it is very nice to see how the sequence numbers relate to the remaining window size. The same graph also shows a third line (below the sequence line) that will tell you what has been ACKed.

Also, you could add a column to your Wireshark setup containing the window size and export the packet list as CSV. That way you can graph whatever you like in programs like Excel or similar tools.

permanent link

answered 14 Nov '12, 01:40

Jasper's gravatar image

Jasper ♦♦
23.6k551284
accept rate: 18%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×743
×344
×54
×41

question asked: 14 Nov '12, 00:55

question was seen: 21,886 times

last updated: 26 Apr '15, 05:21

p​o​w​e​r​e​d by O​S​Q​A