This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

TLS traffic bytes on wire

0

I captured a TLS Session where I'm sending my files to a Cloud Storage and have multiple entries with over 1514 bytes on wire, the biggest one is 16512Byte and the others are lower. Only the frames I'm sending are that big. Does the TLS application have some kind of buffer and then hands the buffer over to the NIC which builds the segments according the MTU?

asked 12 Aug '15, 17:50

gill89's gravatar image

gill89
11113
accept rate: 0%


One Answer:

0

TSO TCP send offload is probably active on the nic.

answered 12 Aug '15, 21:30

Anders's gravatar image

Anders ♦
4.6k952
accept rate: 17%

I already checked that. I'm using Windows 10 and it says Chimney is disabled. Any other suggestions?

(13 Aug '15, 02:40) gill89

Nevermind you were totally right. I thank you for your suggestion! It was enabled on the NIC. I thought i checked this option but obviously not. Thank you very much.

(13 Aug '15, 03:02) gill89