Wireshark-users: Re: [Wireshark-users] Question about Time/Sequence Graph
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Gordon Widera <gwidera@xxxxxxxxx>
Date: Tue, 11 Aug 2009 00:01:33 -0700
This is great information, thanks for taking the time to explain it to me.

Regards

- Gordon

On Mon, Aug 10, 2009 at 11:53 PM, Sake Blok <sake@xxxxxxxxxx> wrote:
On Mon, Aug 10, 2009 at 09:52:18PM -0700, Gordon Widera wrote:
>
>    I have a newbie question regarding Time-Sequence Graph (tcptrace). When
>    the gap between the "TCP window size" and "Segment Transmitted" maintains
>    a wide distance through out the transaction, what does it mean? I have
>    confirmed that I have picked the correct direction in terms of data flow.

That means that the receiving end of the connection is able to pass the
data from the tcp-buffers to the application quickly enough to not fill
up the tcp receive buffers. Which is a good thing :-) When the "TCP
window size" line start to come closer to the "Segment Transmitted"
line, then you know the receiving end has difficulty processing the
received data in a timely manner.

Cheers,
  Sake
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
            mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe