Hi Gerald,
Thanks for the details. According to wireshark, Is one TCP conversation one TCP session?
For a 500 file download (using TCP), there are 1200 TCP conversations. I can't understand why?
Also, each file is 2MB size, but per TCP conversation the bytes transferred is less than 2MB. Don’t know why as well.
Any insights will be really helpful. Thanks.
Sudharsanan
Date: Thu, 17 Apr 2008 10:50:13 -0700
From: Gerald Combs <gerald@xxxxxxxxxxxxx>
Subject: Re: [Wireshark-users] TCP conversation
To: Community support list for Wireshark
<wireshark-users@xxxxxxxxxxxxx>
Message-ID: <48078DD5.9080307@xxxxxxxxxxxxx>
Content-Type: text/plain; charset=UTF-8
Sudharsanan Ranganathan wrote:
> In a TCP conversation window, what is “Rel Start”? and what is “Duration”?
>
> Is duration the time taken for that TCP conversation? Or Rel Start is
> the time taken for that TCP conversation?
"Rel Start" is the time in seconds between the start of the capture (packet #1)
and the start of the conversation. "Duration" is the time in seconds between the
first and last packet of the conversation.
> If a file is being downloaded using TCP, which parameter gives the time
> taken to download? Is it Rel Start or Duration?
Duration.
