i would like to know how wireshark is calculating rtt? is it cosidering delayed ack's, piggybacked acks and retransmitted packets.If it is not considered how do i incoorporate/filter these in calcuting rtt asked 07 Jun '13, 00:49 SThomas converted 07 Jun '13, 01:48 grahamb ♦ |
2 Answers:
The Wireshark initial Round Trip Time (iRTT) value is calculated when the first two packets of a TCP handshake are seen {SYN, SYN/ACK}. This value will remain the same for the entire TCP conversation. {tcp.analysis.initial_rtt} When you graph RTT in an IO graph, latency times are depicted between a data packet and the subsequent acknowledgment packet. You can always do your own handshake analysis and filter on {tcp.flags.syn==1} to find the start of the conversation and then set time deltas to calculate individual session RTTs. answered 08 Nov '16, 09:57 BruteForce |
It takes the send time (ack) - send time (packet, that is, tcp) k? answered 07 Nov '16, 09:58 Josh123456789 |