Ethereal-users: [Ethereal-users] RE: TCP ACK packets with data in them...

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: "Bob Eby" <beby@xxxxxxxxxxxx>
Date: Mon, 3 Mar 2003 10:12:49 -0800
> You're seeing exactly what went out over the wire, and it's
> perfectly legitimate according to the TCP specification.

This is exactly what I didn't understand.  Thanx for taking the time to
straiten me out.

I didn't realize the PUSH bit was only needed on the last data packet
sent.  I guess this illustrates the fact I'm not quite sure exactly why
PUSH exists and what it means.  Guess it's time to get in and really
read RFC's 793, 1072, 1185, and 1323 (if not others and a couple books
on the subject).

-Bob
beby@xxxxxxxxxxxx