In our application, we are using apache tomcat webserver running in 8081. It receives POST message from Client at 16:42:06.87 IST timeframe. It acknowledges by ACK packet with window size of 62356 bytes after 200ms. After some seconds (3-5 seconds), it also sends similar ACK packet but as a "TCP Window Update" packet of 65535 bytes (Buffer empty) to client. And then it sends 200 OK which means Successful Processing... My question: What are the scenarios which "TCP Window Update" packet would be sent from Server to Client. Does this means webserver or Application-Layer took around 3-5 seconds to read 65535-62356(~ 3100) bytes which was in its TCP Receiver window and after reading, it has sent "TCP Window Update" packet since it is yet to send response asked 16 Jun '15, 02:22  Sashi |
This is a static archive of our old Q&A Site.
Please post any new questions and answers at ask.wireshark.org.
Could you provide us a trace?