Again, this field is valid only if the connection was captured fully to include the SYN packets. adv wind scale The window scaling factor used.Note that since Window Scaling option is sent only in SYN packets, this field is meaningful only if the connection was captured fully in the dumpfile to include the SYN packets. For example, an ``N/Y'' in this field means that the window-scaling option was not specified, while the Time-stamp option was specified in the SYN segment. If the option was not requested, an `N' is printed. req 1323 ws/ts If the endpoint requested Window Scaling/Time Stamp options as specified in RFC 1323 a `Y' is printed on the respective field.SYN/FIN pkts sent The count of all the packets seen with the SYN/FIN bits set in the TCP header respectively.pushed data pkts The count of all the packets seen with the PUSH bit set in the TCP header.outoforder pkts The count of all the packets that were seen to arrive out of order.zwnd probe bytes The total bytes of data sent in the window probe packets.(Window probe packets are typically sent by a sender when the receiver last advertised a zero receive window, to see if the window has opened up now). zwnd probe pkts The count of all the window probe packets seen.rexmt data bytes The total bytes of data found in the retransmitted packets.rexmt data pkts The count of all the packets found to be retransmissions.Note that this includes bytes from retransmissions / window probe packets if any. actual data bytes The total bytes of data seen.
actual data pkts The count of all the packets with at least a byte of TCP data payload.unique bytes sent The number of unique bytes sent, i.e., the total bytes of data sent excluding retransmitted bytes and any bytes sent doing window probing.max sack blks/ack The maximum number of sack blocks seen in any sack packet.dsack pkts sent The total number of sack packets seen that carried duplicate SACK (D-SACK) blocks.sack pkts sent The total number of ack packets seen carrying TCP SACK blocks.pure acks sent The total number of ack packets seen that were not piggy-backed with data (just the TCP header and no TCP data payload) and did not have any of the SYN/FIN/RST flags set.ack pkts sent The total number of ack packets seen (TCP segments seen with the ACK bit set).total packets The total number of packets seen.
TCPtrace est un outil pour analyser une capture Wireshark et voir de nombreux indicateur lié au protocole TCPĭetail des indicateurs fournis par TCPtrace :
0 kommentar(er)
