Ethereal-users: Re: [Ethereal-users] Window scaling and relative sequence numbers

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Ronnie Sahlberg" <ronnie_sahlberg@xxxxxxxxxxxxxx>
Date: Fri, 30 Jul 2004 06:36:46 +1000
I think Ethereal is correct here.

If you look in the SYN packet for that direction of the TCP session I think
you will
see that window scaling is used and the window scaling option is 7 (bits)


----- Original Message ----- 
From: "Markus Rehbach"
Sent: Thursday, July 29, 2004 7:35 PM
Subject: [Ethereal-users] Window scaling and relative sequence numbers


> Hi all,
>
> there seems to be a problem in 0.10.5 and probably older ones.
>
> If preference is 'tcp.relative_sequence_numbers: TRUE' there is a wrong
> value shown for the window size (3rd line below: Win=747520 should be
5840).
>
>   0.070763 a -> b TCP 32985 > imap [SYN] Seq=0 Ack=0 Win=5840 Len=0
MSS=1460 TSV=3609664 TSER=0 WS=7
>   0.071129 b -> a TCP imap > 32985 [SYN, ACK] Seq=0 Ack=1 Win=5840 Len=0
MSS=1460
>   0.071176 a -> b TCP 32985 > imap [ACK] Seq=1 Ack=1 Win=747520 Len=0
>
> If preference is 'tcp.relative_sequence_numbers: FALSE' it looks good.
>
>   0.076386 a -> b TCP 32991 > imap [SYN] Seq=4090487846 Ack=0 Win=5840
Len=0 MSS=1460 TSV=4006974 TSER=0 WS=7
>   0.076748 b -> a TCP imap > 32991 [SYN, ACK] Seq=3661596958
Ack=4090487847 Win=5840 Len=0 MSS=1460
>   0.076798 a -> b TCP 32991 > imap [ACK] Seq=4090487847 Ack=3661596959
Win=5840 Len=0
>
> Problem shows up in ethereal and tethereal (no surprise;-).
>
> Markus
>
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
>