Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

asked 2024-06-21 21:07:34 +0000

net_tech gravatar image

Window size drop to 11 with ACK packet

Hi

What could cause a TCP Window size change during a handshake?

Linux Host is talking to a Windows Host. 6th column is tcp.time_delta_displayed (which seems to be too good to be true) Linux SYN packet does not have any TCP options which seems strange as well. Captured on the Windows (Client Side)

1 Linux Windows TCP 74 42340 0.000000000 52404 → 12800 [SYN] Seq=0 Win=42340 2 Windows
Linux TCP 66 65535 0.000145000 12800 → 52404 [SYN, ACK] Seq=0 Ack=1 Win=65535 3 Linux Windows TCP 60 11 0.000070000 52404 → 12800 [ACK] Seq=1 Ack=1 Win=11

Thank you

Window size drop to 11 with ACK packet

Hi

What could cause a TCP Window size change during a handshake?

Linux Host is talking to a Windows Host. 6th column is tcp.time_delta_displayed (which seems to be too good to be true) Linux SYN packet does not have any TCP options which seems strange as well. Captured on the Windows (Client Side)

1 Linux Windows TCP 74 42340 0.000000000 52404 → 12800 [SYN] Seq=0 Win=42340 2 Windows

2 Windows Linux TCP 66 65535 0.000145000 12800 → 52404 [SYN, ACK] Seq=0 Ack=1 Win=65535 3

3 Linux Windows TCP 60 11 0.000070000 52404 → 12800 [ACK] Seq=1 Ack=1 Win=11

Thank you

Window size drop to 11 with ACK packet

Hi

What could cause a TCP Window size change during a handshake?

Linux Host is talking to a Windows Host. 6th column is tcp.time_delta_displayed (which seems to be too good to be true) Linux SYN packet does not have any TCP options which seems strange as well. Captured on the client side Windows (Client Side)

1 Linux Windows TCP 74 42340 0.000000000 52404 → 12800 [SYN] Seq=0 Win=42340

2 Windows Linux TCP 66 65535 0.000145000 12800 → 52404 [SYN, ACK] Seq=0 Ack=1 Win=65535

3 Linux Windows TCP 60 11 0.000070000 52404 → 12800 [ACK] Seq=1 Ack=1 Win=11

Thank you

click to hide/show revision 4
None

updated 2024-06-22 14:07:41 +0000

Chuckc gravatar image

Window size drop to 11 with ACK packet

Hi

What could cause a TCP Window size change during a handshake?

Linux Host is talking to a Windows Host. 6th column is tcp.time_delta_displayed (which seems to be too good to be true) Linux SYN packet does not have any TCP options which seems strange as well. Captured on the client side Windows

1 Linux Windows TCP 

No. Source  Destination Proto   Len WinSize Time        Info
1   Linux   Windows     TCP     74  42340   0.000000000 52404
  52404 → 12800 [SYN] Seq=0 Win=42340
 
Win=**42340**

2 Windows  Linux  TCP   Windows  Linux          TCP     66  65535   0.000145000 12800 →
  → 52404 [SYN, ACK] Seq=0 Ack=1
  Win=65535 
 
Ack=1 Win=**65535** 

3 Linux    Windows TCP   Linux   Windows     TCP     60  11  0.000070000 52404
  52404 → 12800 [ACK] Seq=1 Ack=1 Win=11
Win=**11**

Thank you

click to hide/show revision 5
None

updated 2024-06-22 14:09:31 +0000

Chuckc gravatar image

Window size drop to 11 with ACK packet

Hi

What could cause a TCP Window size change during a handshake?

Linux Host is talking to a Windows Host. 6th column is tcp.time_delta_displayed (which seems to be too good to be true) Linux SYN packet does not have any TCP options which seems strange as well. Captured on the client side Windows 

No. Source  Destination Dest.       Proto   Len WinSize Time        Info
1   Linux   Windows     TCP     74  42340   0.000000000 52404 → 12800 [SYN] Seq=0 Win=**42340**
Win=42340

2   Windows  Linux       TCP     66  65535   0.000145000 12800 → 52404 [SYN, ACK] Seq=0 Ack=1 Win=**65535** Win=65535 

3   Linux   Windows     TCP     60  11   0.000070000 52404 → 12800 [ACK] Seq=1 Ack=1 Win=**11**
Win=11

Thank you