This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

link textThe client's window size is 2836, the client requested http on frame 4. The server start sending data on frame 5, my question is on frame 8, why wireshark says TCP window full given the client already acked on frame 6? my understanding is that tcp window full only displays when the server send the amount of data equal to client's window size without getting an ack back, in my case, the ack was received on frame 6.

appreciate anyone provides some explanations. thanks.

asked 12 Dec '13, 09:18

czhang's gravatar image

czhang
1223
accept rate: 0%

edited 12 Dec '13, 09:24


Well, you do not have packet sizes in your screenshot, but the ACK in frame 6 has a window size of 1488 bytes, which is most likely filled in packets 7 and 8. And since it is full in frame 8 Wireshark tells you so.

permanent link

answered 12 Dec '13, 09:30

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%

thanks Jasper. I appreciate it.

(12 Dec '13, 09:58) czhang

If an answer has solved your issue, please accept the answer for the benefit of other users by clicking the checkmark icon next to the answer. Please read the FAQ for more information.

(13 Dec '13, 01:38) grahamb ♦
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×752
×139
×55
×3

question asked: 12 Dec '13, 09:18

question was seen: 4,192 times

last updated: 13 Dec '13, 01:38

p​o​w​e​r​e​d by O​S​Q​A