Saw this pcap about a SSL handshake. The timing seems a little strange: The time between TCP SYN and SYNACK is 91ms. But the time between CLIENT_HELLO and SERVER_HELLO is only 9ms. Wonder what's the reason for that. asked 04 Sep '15, 08:03 pktUser1001 |
One Answer:
The path is probably going through a firewall infrastructure. Regards Matthias answered 04 Sep '15, 15:50 mrEEde |
It makes sense. Wonder what's the best way to measure round-trip time from a pcap.