Wireshark-users: Re: [Wireshark-users] I/O Graph Bug??
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Lee <ler762@xxxxxxxxx>
Date: Sun, 25 May 2014 12:27:40 -0400
On 5/23/14, Burns, Kevin <Kevin_Burns@xxxxxxxxxxxxxxxxx> wrote:
> I am running into a strange issue with the I/O graph in Wireshark Version
> 1.10.7.
>
> It seems to be graphing the tcp.window_size with the value of the
> tcp.window_size_value.  Below I compared the window size graph in Opnet to
> show how the I/O graph is incorrect. tcp.window_size is supposed to be the
> calculated value of the scaled TCP window but the actual value in the packet
> field.
>
> Has anyone else ran into this ?

Yes.  I've seen it when the capture does NOT have the initial syn
syn/ack & so wireshark doesn't know the window scale factor.

Lee

>
> [cid:image001.png@01CF768E.13E126F0]
>