THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.

Revision history  [back]

Drawing actual TCP window size in Wireshark

I'm wondering if it's possible to draw in wireshark the actual size of TCP window (amount of unacknowledged data sent). I'm aware of Statistics/TCP Stream graphs/Window scaling but to my understanding it draws maximum TCP window allowed by receiver and the actual amount of unacknowledged data sent be sender could be lower.

That's how I think it could be calculated:

  • If the capture was done on receiver end the window size would be amount of data sent in a time window equal to RTT.
  • If the capture was done on a sender end that would be amount of data sent since the last acknowledged packet.

Drawing actual TCP window size in Wireshark

I'm wondering if it's possible to draw in wireshark the actual size of TCP window (amount of unacknowledged data sent). I'm aware of Statistics/TCP Stream graphs/Window scaling but to my understanding it draws maximum TCP window allowed by receiver and the actual amount of unacknowledged data sent be sender could be lower.

That's how I think it could be calculated:

  • If the capture was done on receiver end the window size would be amount of data sent in a time window equal to RTT.
  • If the capture was done on a
    sender end that would be amount of
    data sent since the last acknowledged packet.

Drawing actual TCP window size in Wireshark

I'm wondering if it's possible to draw in wireshark the actual size of TCP window (amount of unacknowledged data sent). I'm aware of Statistics/TCP Stream graphs/Window scaling but to my understanding it draws maximum TCP window allowed by receiver and the actual amount of unacknowledged data sent be sender could be lower.

That's how I think it could be calculated:

  • If

    -If the capture was done on receiver receiver end the window size would be amount amount of data sent in a time window equal equal to RTT.

  • If

    -If the capture was done on a
    sender end that would be amount of
    data sent since the last acknowledged acknowledged packet.

Drawing actual TCP window size in Wireshark

I'm wondering if it's possible to draw in wireshark the actual size of TCP window (amount of unacknowledged data sent). I'm aware of Statistics/TCP Stream graphs/Window scaling but to my me understanding it draws maximum TCP window allowed by receiver and the actual amount of unacknowledged data sent be sender could be lower.

That's how I think it could be calculated:

-If the capture was done on receiver end the window size would be amount of data sent in a time window equal to RTT.

-If the capture was done on a sender end that would be amount of data sent since the last acknowledged packet.