This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Window size scaling factor unknown?

0

I have noticed some strange packets with the "Window size scaling factor: -1 (unknown)". Is this a buffer full problem? I am seeing this on both the source and destination intermittently.

Thanks for your help in advance,

asked 26 Apr '12, 11:30

arpsalot's gravatar image

arpsalot
1111
accept rate: 0%

edited 26 Apr '12, 14:48

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k335196


One Answer:

1

It just means that Wireshark doesn't KNOW the scale factor, most likely because it hasn't seen the SYN / SYN/ACK packets (where the options are negotiated). -1 is an artifical value meaning "unknown". So no, it is not a buffer full problem.

answered 26 Apr '12, 11:40

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%