This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

As you can see at image during ftp-data session establishment size of MSS was negotiated equal to 1360 bytes. But then transfer started and server sends blocks much greater than MSS value, and greater than MTU (1500) value as well. Is there some missunderstanding of Wireshark output or how can be this justified?

alt text

asked 26 May '15, 23:33

mongolio's gravatar image

mongolio
21459
accept rate: 0%


probably Large Segment Offload. Check the same session at the receiver, you then see the difference your NIC makes.

permanent link

answered 27 May '15, 00:44

Jaap's gravatar image

Jaap ♦
11.7k16101
accept rate: 14%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×1,620
×752
×56
×23

question asked: 26 May '15, 23:33

question was seen: 1,972 times

last updated: 27 May '15, 00:44

p​o​w​e​r​e​d by O​S​Q​A