This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

TCP window full message after receiving ACK?

0

link textThe client's window size is 2836, the client requested http on frame 4. The server start sending data on frame 5, my question is on frame 8, why wireshark says TCP window full given the client already acked on frame 6? my understanding is that tcp window full only displays when the server send the amount of data equal to client's window size without getting an ack back, in my case, the ack was received on frame 6.

appreciate anyone provides some explanations. thanks.

asked 12 Dec '13, 09:18

czhang's gravatar image

czhang
1223
accept rate: 0%

edited 12 Dec '13, 09:24


One Answer:

0

Well, you do not have packet sizes in your screenshot, but the ACK in frame 6 has a window size of 1488 bytes, which is most likely filled in packets 7 and 8. And since it is full in frame 8 Wireshark tells you so.

answered 12 Dec '13, 09:30

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%

thanks Jasper. I appreciate it.

(12 Dec '13, 09:58) czhang

If an answer has solved your issue, please accept the answer for the benefit of other users by clicking the checkmark icon next to the answer. Please read the FAQ for more information.

(13 Dec '13, 01:38) grahamb ♦