This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Why do TCP ACK packets have length > 0

0

Hello,

I can see that some ACK packet without PSH flag sends data as well. I have thought that ACK packet will always have len=0, but I see packets with ACK flag only and len=1380.

asked 06 Jan '15, 08:07

Otas's gravatar image

Otas
16113
accept rate: 0%

converted to question 06 Jan '15, 08:46

grahamb's gravatar image

grahamb ♦
19.8k330206


2 Answers:

2

Its called as piggybacking,Piggybacking is a bi-directional data transmission technique. It makes the most of the sent data frames from receiver to emitter, adding the confirmation that the data frame sent by the sender was received successfully (ACK acknowledge). This practically means, that instead of sending an acknowledgement in an individual frame it is piggy-backed on the data frame

answered 06 Jan '15, 08:41

kishan%20pandey's gravatar image

kishan pandey
221282936
accept rate: 28%

Hello Kishan,

thank you for lightning response. Fully clarified.

BR

Otas

(06 Jan '15, 10:58) Otas

1

After the SYN packet, every single packet will have the ACK bit set, so data packets are also ACK packets.

answered 06 Jan '15, 10:10

Jim%20Aragon's gravatar image

Jim Aragon
7.2k733118
accept rate: 24%