Options

TCP Windows

new2netnew2net Member Posts: 81 ■■□□□□□□□□
Hey everyone,

Just had a quick question on TCP Windows. I'm looking at a capture and it goes something like this:

Packet 1 (from client):

Seq=1, ACK=480, Window=256, Len=0

Packet 2 (from server):

Seq=480, ACK=1, Window=260, Len=540

The connection has already been established and I'm just focusing on some of the actual data flow. In this example, the client sets a window size of 256. This tells the server that it can send 256 bytes before having to wait for an acknowledgement. If this is the case, why does the server respond with 540 bytes instead of 256?

The entire capture shows similar data. It appears the sender is sending more bytes than what is stated in the client window field. There aren't any discarded packets in the capture.

Any ideas?

Thank you.

Comments

  • Options
    mikeybinecmikeybinec Member Posts: 484 ■■■□□□□□□□
    The server is saying I can accept this size
    Cisco NetAcad Cuyamaca College
    A.S. LAN Management 2010 Grossmont College
    B.S. I.T. Management 2013 National University
  • Options
    new2netnew2net Member Posts: 81 ■■□□□□□□□□
    Why is the server sending 540 bytes when the client sets a window of 256?
  • Options
    mikeybinecmikeybinec Member Posts: 484 ■■■□□□□□□□
    If the server sends back an ACK and if there are no errors, the client/host can increase the window size

    Odom, pg 141
    Cisco NetAcad Cuyamaca College
    A.S. LAN Management 2010 Grossmont College
    B.S. I.T. Management 2013 National University
  • Options
    SteveO86SteveO86 Member Posts: 1,423
    new2net wrote: »
    Why is the server sending 540 bytes when the client sets a window of 256?

    Does either end support window scaling? (Pretty much all clients nowadays support window scaling)

    Without seeing all the TCP Options during the 3-way handshake it's hard to say.

    Also as mentioned below, when ever data is successfully Ack'ed without packet loss the window size will grow.
    My Networking blog
    Latest blog post: Let's review EIGRP Named Mode
    Currently Studying: CCNP: Wireless - IUWMS
  • Options
    new2netnew2net Member Posts: 81 ■■□□□□□□□□
    mikeybinec wrote: »
    If the server sends back an ACK and if there are no errors, the client/host can increase the window size


    Odom, pg 141



    That isn't exactly what I'm asking...

    When the client sends packet 1 to the server, the window value indicates that the server may send 256 bytes before it needs to wait for an ACK. So why then does the server send 540 bytes when the client tells it to only send 256?
  • Options
    new2netnew2net Member Posts: 81 ■■□□□□□□□□
    SteveO86 wrote: »
    Does either end support window scaling? (Pretty much all clients nowadays support window scaling)

    Hey Steve,

    No scaling is being used...
Sign In or Register to comment.