Wireshark windows linxu tigai9/7/2023 ![]() ![]() When TCP shakes hands three times, in syn or syn, ACK packet, inform options optional information, inform the other party that the amplification factor will be used.ģ. Since the TCP header window field is only 16bit, which represents 64K at most, an optional magnification is used to represent a larger window.ġ. You can only look at the first one when you are surrounded by a wall Google took a look at Wireshark window size value calculated window size and found two articles in the reference link Why do I think the first bag is abnormalīecause RFC has said that MSS Ethernet is 1460 bytes (1500 – 40), and the minimum MSS seems to be 536 bytes (576, the minimum number of bytes of reorganization buffer – 40).Ĭlick on the syn package, and the following two fields attract my attention: This package win looks a bit normal, although there is still a problem, 99 win is much smaller than 100. Syn package, a look, it seems to be more normal: ![]() Later, I asked my colleagues to restart the program and catch another bag with a handshake Looking at the data, I think it’s very strange.ĩ9 machine told 100 machine, win = 36, but then 100 sent a len = 180 data to 99, which is not in line with the implementation of sliding window!įor a long time, I didn’t find the relevant information, because the method I used to check was wrong. Because the two programs are connected for a long time, there is no syn handshake process for the packets caught in the middle. Mainly is – C, limits the file size to 1m to cut the file. I used the following command to catch the bag: tcpdump-ieth0tcpandport9981-w/data/steven/tcpdump/tcpdump.cap-C1-s0& This time I really care about the window. ![]() Recently in the project, I found that when I contracted out two machines, one of them was slow to collect. ![]()
0 Comments
Leave a Reply.AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |