Wireshark-bugs: [Wireshark-bugs] [Bug 1842] New: TCP window size incorrect when conversation fil
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Thu, 13 Sep 2007 16:14:38 +0000 (GMT)
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1842

           Summary: TCP window size incorrect when conversation filter
                    applied.
           Product: Wireshark
           Version: SVN
          Platform: PC
        OS/Version: All
            Status: NEW
          Severity: Normal
          Priority: Medium
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: christopher.maynard@xxxxxxxxx


Build Information:
SVN 22858
--
The TCP window size, as displayed in the Info column for SYN-ACK packets, is
incorrect if a TCP conversation filter is applied.  This can easily be seen
using the small 3 packet trace file I will attach.  If you open the file with
no filter applied, the correct unscaled window size of 5792 is reported;
however, you right-click and choose "Conversation Filter -> TCP", then the
window size is incorrectly reported as 2965504, which means that the scaling
factor of 9 (multiply by 512) is incorrectly being applied.  As you probably
already know, the scaling factor should never be applied to window sizes for
SYN or SYN-ACK packets.   If you didn't know that, then refer to the last
paragraph of section 2.2 in RFC1323, available here:
http://www.ietf.org/rfc/rfc1323.txt


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.