Wireshark-users: Re: [Wireshark-users] Question about Time/Sequence Graph
From: Gordon Widera <[email protected]>
Date: Tue, 11 Aug 2009 00:01:33 -0700
This is great information, thanks for taking the time to explain it to me.


- Gordon

On Mon, Aug 10, 2009 at 11:53 PM, Sake Blok <[email protected]> wrote:
On Mon, Aug 10, 2009 at 09:52:18PM -0700, Gordon Widera wrote:
>    I have a newbie question regarding Time-Sequence Graph (tcptrace). When
>    the gap between the "TCP window size" and "Segment Transmitted" maintains
>    a wide distance through out the transaction, what does it mean? I have
>    confirmed that I have picked the correct direction in terms of data flow.

That means that the receiving end of the connection is able to pass the
data from the tcp-buffers to the application quickly enough to not fill
up the tcp receive buffers. Which is a good thing :-) When the "TCP
window size" line start to come closer to the "Segment Transmitted"
line, then you know the receiving end has difficulty processing the
received data in a timely manner.

Sent via:    Wireshark-users mailing list <[email protected]>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
            mailto:[email protected]?subject=unsubscribe