This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

My host machine is ubuntu and guest machine is windows 7.

I'm generating traffic on windows 7 and capturing its traffic in the middle on ubuntu with wireshark.

Both host and guest machines' MTU is 1500 bytes, but i see no packet with size more than 1430 bytes in wireshark.

1430 bytes is for (application data + tcp and ip headers) and the size on wire is 1444 bytes.

My question is that why the packets don't have the size of 1500 considering (application data + tcp and ip headers) ?

asked 20 Jan '16, 14:51

Amins's gravatar image

Amins
6114
accept rate: 0%

What's the MSS in the TCP SYN packets? Is one of them less than 1460?

(20 Jan '16, 17:46) Jasper ♦♦

The MSS in the syn packet is 1460 bytes but in the syn-ack packet, the MSS is 1390 bytes and i also see the size of 1390 bytes for layer application in my packets.

(20 Jan '16, 18:46) Amins

If the SYN-ACK packet has 1390 it means that the Server supports only an MTU of 1390 + 20 (standard TCP header size) + 20 (standard IPv4 header size) = 1430. So even if your machine supports 1460 (= MTU 1500) it will not utilize it, because it knows that the server cannot receive packets of that size. And the server will not send anything greater than 1430 because it's MTU doesn't allow it.

While the MSS in the SYN packets is not really a negotiation both nodes are wise to use the lower number as a maximum size for their segments to avoid "fragmentation needed" problems.

So if you wonder why the server uses an MTU of 1430 you need to check it's stack/interface setting. Somewhere it must have been configured that way.

permanent link

answered 21 Jan '16, 01:15

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%

edited 21 Jan '16, 01:18

1

Jaspers answer has inspired me to write the following article about the mtu and the mss:

http://crnetpackets.com/2016/01/27/the-relation-between-maximum-transmission-unit-mtu-and-the-maximum-segment-size-mss/

(30 Jan '16, 14:34) Christian_R
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×1,620
×25

question asked: 20 Jan '16, 14:51

question was seen: 4,654 times

last updated: 30 Jan '16, 14:35

p​o​w​e​r​e​d by O​S​Q​A