Wireshark mailing list archives
Re: Windows 7 Ignores TCP MSS?
From: Andrew Hood <ajhood () fl net au>
Date: Thu, 24 Mar 2011 21:09:48 +1100
Robinson, Eric wrote:
> It's likely that the NIC has hardware TCP offloading enabled and you'recapturing it before the NIC chops it up to 1460. If you capture thetrafficfrom the network, you'll likely see the 1460 TCP length packets.If the NIC has offloading enabled, I guess the stack knows this and sends it bigger frames, knowing it will packetize them smaller? Because I went into the adapter properties and turned off all the offloading features, and now it is being reported as expected in WireShark. So I guess when the NIC's offload capabilities are disabled, the stack detects this and only sends it frames that are appropriate for the MTU?
You will also find if TCP Chimney is enabled you will only see the session setup and teardown packets (SYN/FIN/RST) for TCP connections. Andrew -- There's no point in being grown up if you can't be childish sometimes. -- Dr. Who ___________________________________________________________________________ Sent via: Wireshark-users mailing list <wireshark-users () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-users Unsubscribe: https://wireshark.org/mailman/options/wireshark-users mailto:wireshark-users-request () wireshark org?subject=unsubscribe
Current thread:
- Windows 7 Ignores TCP MSS? Robinson, Eric (Mar 23)
- Re: Windows 7 Ignores TCP MSS? Hansang Bae (Mar 23)
- Re: Windows 7 Ignores TCP MSS? Robinson, Eric (Mar 23)
- Re: Windows 7 Ignores TCP MSS? Andrew Hood (Mar 24)
- Re: Windows 7 Ignores TCP MSS? Robinson, Eric (Mar 23)
- Re: Windows 7 Ignores TCP MSS? Hansang Bae (Mar 23)