TCP ACK with 1460 Bytes of Data

ACK
1460
data
retag add tags

Hi folks- I have a capture (from a tcpdump) and I see that at different periods I have a unit that will send a burst of late ACKs all in a row and I am seeing that these packets also all have 1460 bytes of data in them. The normal ACKs in this enviro have no bytes in the data field. Just curious what causes ACKs to store, increment, or otherwise populate the data field? Thanks, g

sigrant

asked 2019-08-30 17:21:09 +0000, updated 2019-08-30 17:22:05 +0000

edit flag offensive 0 remove flag close merge delete

Comments

Do you have a pcap file you could share?

Jasper (2019-09-01 21:33:12 +0000) edit

In the meantime, maybe have a look at RFC 793 - Transmission Control Protocol?

cmaynard (2019-09-06 13:26:18 +0000) edit

add a comment see more comments

Be the first one to answer this question!

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

TCP ACK with 1460 Bytes of Data edit

Comments

Be the first one to answer this question!

TCP ACK with 1460 Bytes of Data