Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

What are those TCP Keep Alives

Hey all,

I have a Network flow that works like this:

     Client                             Server
1.      | -------- Send an ENQ --------->  |        // Initialization
2.      | <------- Send an ACK ----------  |        //
3.      | --------- Send DATA  --------->  |        // Transmission
4.      | <------- Send an ACK ----------  |        //
5.      | -------- Send an EOT --------->  |        // Termination

This is a screenshot of the wireshark capture of this communication:

Wireshark capture print

Where 192.168.0.2 is the server and 192.168.0.3 is the client.

Mostly of the capture seems correct, I can identify the initial TCP handshake, and the previous flow, but I don't understand what are the frames nº 12 to 16.

Are those TCP Keep Alive requests, without the clients replies? And how about frame nº 15? What is that?

Thank you.

Any input is appreciated.