Wireshark-users: Re: [Wireshark-users] Question about Time/Sequence Graph
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Sake Blok <sake@xxxxxxxxxx>
Date: Tue, 11 Aug 2009 08:53:46 +0200
On Mon, Aug 10, 2009 at 09:52:18PM -0700, Gordon Widera wrote:
> 
>    I have a newbie question regarding Time-Sequence Graph (tcptrace). When
>    the gap between the "TCP window size" and "Segment Transmitted" maintains
>    a wide distance through out the transaction, what does it mean? I have
>    confirmed that I have picked the correct direction in terms of data flow.

That means that the receiving end of the connection is able to pass the
data from the tcp-buffers to the application quickly enough to not fill
up the tcp receive buffers. Which is a good thing :-) When the "TCP
window size" line start to come closer to the "Segment Transmitted"
line, then you know the receiving end has difficulty processing the
received data in a timely manner.

Cheers,
   Sake