This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

MSS value negotiated during ftp-data session establishment but wireshark shows larger blocks sent by server

0

As you can see at image during ftp-data session establishment size of MSS was negotiated equal to 1360 bytes. But then transfer started and server sends blocks much greater than MSS value, and greater than MTU (1500) value as well. Is there some missunderstanding of Wireshark output or how can be this justified?

alt text

asked 26 May '15, 23:33

mongolio's gravatar image

mongolio
21459
accept rate: 0%


One Answer:

1

probably Large Segment Offload. Check the same session at the receiver, you then see the difference your NIC makes.

answered 27 May '15, 00:44

Jaap's gravatar image

Jaap ♦
11.7k16101
accept rate: 14%