Wireshark · Wireshark-users: [Wireshark-users] TCP Window Update

[Xtrolyte <xtrolyte@xxxxxxxxx>]

In doing some analysis with Wireshark, I've been seeing a lot of TCP Window Update packets. I understand the basics of what this means....as in the source and destination changing their TCP receive windows to adjust for the amount of data each can handle. Is this understanding correct? Also, in a normal capture, should I see a lot of these. What is it a sign of when I see a ton of these in a capture?

 

Cheers.