Wireshark-users: Re: [Wireshark-users] tcp.window_size OR tcp.window_size_value ??
Hello,
thanks a lot!!! It is more clear now.
Regards,
StockTrader
On 2 Nov 2011, at 20:12, <Tim.Poth@xxxxxxxxxxx> <Tim.Poth@xxxxxxxxxxx> wrote:
> 'tcp.window_size_value' is the value in the TCP header for window size, EG 511 in the example im looking at.
> 'tcp.window_size' is the Calculated size for the window if windows scaling is enabled, EG 130816 in the example im looking at (scaling factor of 256 times 511 for the 'tcp.window_size_value' )
>
> If you want to know what the effective window size is (value in the header times scaling factor) I would say 'tcp.window_size' would be the better filter (less math for you involved)
>
> Hope that helps
> tim
>
> -----Original Message-----
> From: wireshark-users-bounces@xxxxxxxxxxxxx [mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of Marco Zuppone
> Sent: Wednesday, November 02, 2011 3:57 PM
> To: Community support list for Wireshark
> Subject: [Wireshark-users] tcp.window_size OR tcp.window_size_value ??
>
> Hello,
>
> what is the difference between tcp.window_size and tcp.window_size_value ?
> Which one is better to use?
> Thanks & Regards,
> StockTrader - Marco
> ___________________________________________________________________________
> Sent via: Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
> Archives: http://www.wireshark.org/lists/wireshark-users
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
> mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe
>
> ___________________________________________________________________________
> Sent via: Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
> Archives: http://www.wireshark.org/lists/wireshark-users
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
> mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe
