Wireshark mailing list archives

Re: tcp.window_size OR tcp.window_size_value ??


From: Marco Zuppone <msz () msz it>
Date: Wed, 2 Nov 2011 21:17:49 +0000

Hello,


thanks a lot!!! It is more clear now.
 Regards,
StockTrader
On 2 Nov 2011, at 20:12, <Tim.Poth () bentley com> <Tim.Poth () bentley com> wrote:

'tcp.window_size_value'  is the value in the TCP header for window size, EG 511 in the example im looking at.
'tcp.window_size' is the Calculated size for the window if windows scaling is enabled, EG 130816 in the example im 
looking at (scaling factor of 256 times 511 for the 'tcp.window_size_value' )

If you want to know what the effective window size is (value in the header times scaling factor) I would say 
'tcp.window_size' would be the better filter (less math for you involved)

Hope that helps
tim

-----Original Message-----
From: wireshark-users-bounces () wireshark org [mailto:wireshark-users-bounces () wireshark org] On Behalf Of Marco 
Zuppone
Sent: Wednesday, November 02, 2011 3:57 PM
To: Community support list for Wireshark
Subject: [Wireshark-users] tcp.window_size OR tcp.window_size_value ??

Hello,

what is the difference between tcp.window_size and tcp.window_size_value ?
Which one is better to use?
Thanks & Regards,
StockTrader - Marco
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
            mailto:wireshark-users-request () wireshark org?subject=unsubscribe

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
            mailto:wireshark-users-request () wireshark org?subject=unsubscribe

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe


Current thread: