LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Networking (https://www.linuxquestions.org/questions/linux-networking-3/)
-   -   Analyze packet size, AdvertizedWindowSize (https://www.linuxquestions.org/questions/linux-networking-3/analyze-packet-size-advertizedwindowsize-784744/)

mohitanchlia 01-25-2010 10:00 PM

Analyze packet size, AdvertizedWindowSize
 
I am running tcpdump and using wireshark to analyze the packets. How do I look at the packet size and the AdvertizedWindowSize from the receiver? Do I need to set some options. When I open the file in wireshark I don't see those details.

I am seeing slow transfers and lots of Duplicate Acks so I am trying to see the reason for it. Any suggestions?

nimnull22 01-25-2010 10:33 PM

From somewhere in internet. It is not mine. Sorry.

23:00:38.371059 IP 10.0.0.10.pop3 > 10.0.0.1.33656: P 13468:14292(824) ack 96
win 33304 <nop,nop,timestamp 246782562 2080639302>
23:00:38.373003 IP 10.0.0.1.33656 > 10.0.0.10.pop3: . ack 14292 win 65535
<nop,nop,timestamp 2080639302 246782562>

The "win" indicates the advertised window. So 10.0.0.10 is advertising a
window of 33304 bytes
and 10.0.0.1 is advertising a window of 65535 bytes.

mohitanchlia 01-25-2010 11:54 PM

Thanks. How do I see the size of the packet?

Is there a place that explains the complete tcpdump output?


All times are GMT -5. The time now is 04:22 PM.