First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
Ask Your Question
0

ACK behavior

Is it possible that one single cumulative ACK packet (sniffing on sender side) is received as two single ACK packets (sniffing on receiver side)?

More detailed: I have two capture, one from the sender side and the other one from the receiver. On the sender side I see two packets going out (8 and 378 bytes). After this, I see two received ACK (for 8 and 378 bytes).

On the receiver side I see two packets coming in (8 and 378 bytes). After this, I see one single ACK going out (8 + 378 bytes).

Thanks

becco981's avatar
3
becco981
asked 2019-03-04 14:22:14 +0000
edit flag offensive 0 remove flag close merge delete

Comments

I'm going to ask for the whole capture and going to share the interesting part. In the meanwhile, I found that also the Win size is quiet different between the two captures: for the same frame (packet) I see same data but different window size value...quite strange.

becco981's avatar becco981 (2019-03-04 16:18:07 +0000) edit
more
  • delete

please answer with comments, not new answers! I converted your answer to a comment.

Kurt Knochner's avatar Kurt Knochner (2019-03-04 17:34:04 +0000) edit
more
  • delete
add a comment see more comments

1 Answer

0

sounds rather strange. I can imagine two scenarios.

  • misinterpretation of the pcap
  • TCP offloading (into the NIC) on the receiver, but hard to imagine that his creates such an effect

It's hard to tell what's going on without the pcap. Can you share the pcap (only the interesting part)?
Do you have TCP offloading enabled on the receiver (NIC driver option).

Thanks
Kurt

Kurt Knochner's avatar
24.7k
Kurt Knochner
answered 2019-03-04 16:08:54 +0000
edit flag offensive 0 remove flag delete link
more

Comments

add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer