Re: [Wireshark-dev] TCP ZeroWindowProbe problem / question

2007-02-20 Thread Michael Tuexen
On Feb 20, 2007, at 9:34 PM, Ulf Lamping wrote: > Michael Tuexen wrote: >> Hi Ulf, >> >> just to be clear: >> The sender is allowed to send 1 byte more than the rwnd allows. >> This is used for zero window probing. >> > Yes, your remarks sounds reasonable and reflects the effects I've > seen. >

Re: [Wireshark-dev] TCP ZeroWindowProbe problem / question

2007-02-20 Thread Ulf Lamping
Michael Tuexen wrote: > Hi Ulf, > > just to be clear: > The sender is allowed to send 1 byte more than the rwnd allows. > This is used for zero window probing. > Yes, your remarks sounds reasonable and reflects the effects I've seen. Just out of interest: What will happen if the sender will sen

Re: [Wireshark-dev] TCP ZeroWindowProbe problem / question

2007-02-20 Thread ronnie sahlberg
On 2/20/07, Ulf Lamping <[EMAIL PROTECTED]> wrote: > Interestingly, the effect I saw is that the window size is zero before > and after the probe byte, although the receiver actually ACK'ed the > "probe byte". Do you use window scaling? If you have window scaling the most likely explanation for y

Re: [Wireshark-dev] TCP ZeroWindowProbe problem / question

2007-02-20 Thread Michael Tuexen
Hi Ulf, just to be clear: The sender is allowed to send 1 byte more than the rwnd allows. This is used for zero window probing. The receiver has a rwnd which he uses to accept data or not. But he is free to advertise less, for example for SWS avoidance. This is what you experience: the receiver a

Re: [Wireshark-dev] TCP ZeroWindowProbe problem / question

2007-02-20 Thread Ulf Lamping
ronnie sahlberg wrote: > So if the window is still zero, the ACK will indicate this by NOT > advancing to cover the new byte. > If the window is no longer zero, the receiver can handle the byte and > the ACK will be advanced to cover the new byte. > > First of all, thanks a lot for the detaile

Re: [Wireshark-dev] TCP ZeroWindowProbe problem / question

2007-02-19 Thread ronnie sahlberg
On 2/20/07, Ulf Lamping <[EMAIL PROTECTED]> wrote: > Hi List! > > As I'm not an expert on TCP, I have a problem which seems to be related > to the TCP's ZeroWindowProbe mechanism. As I digged deeper into the > docs, I've found a difference between our Wiki and the TCP RFC (well, > and a lack of kno

[Wireshark-dev] TCP ZeroWindowProbe problem / question

2007-02-19 Thread Ulf Lamping
Hi List! As I'm not an expert on TCP, I have a problem which seems to be related to the TCP's ZeroWindowProbe mechanism. As I digged deeper into the docs, I've found a difference between our Wiki and the TCP RFC (well, and a lack of knowledge on my side on this topic). To quote our Wiki http