WSU - CS 3705-0 - Spring 2006 - Vincenzo MAGGIO
Ethereal Lab TCP
After uploading alice.txt to gaia.cs.umass.edu I got the following page:
and this is part of the capture file:
- My machine
- IP: 67.182.228.87
- port: 2410
- gaia.cs.umass.edu
- IP: 128.119.245.12
- port: 80
- Number 3 is equal to # 1
-
- Seq=0
- the string: "[SYN]"
-
- Seq=0
- Ack=1
- The value is the previous packet Seq number + 1
- the string: "[SYN ACK]"
- here the packet with the POST method
it's the number #221
-
- Seq=1, 560, 1, 2020, 3480, 1
- They were sent at [since capture began] + 1.894674, 1.894862,
1.983667, 1.984024, 1.984034, 1.992590
- in the packet #233 gaia ACKs the first segment
- in packet #233 time delta from previous packet is 0.089. we
can assume that RTT has been at least 0.089 * 2 = 0.178 s.
- round trip:
- packets' lenght 221-237: bytes 613, 1514, 60, 1514, 1514, 60
- No there is no retransmission
- I would check for duplicate ACK, but there is none
- as well as a search with the filter "ip.addr eq
128.119.245.12 and tcp.flags.cwr eq 1"
does not give any result.
Where CWR stands for Congestion Window Reduced
- Ordering by "Source" it is easy to notice in the column
"Info" the several Ack=<number>.
Those numbers are the total bytes received till that ACK-ed
packet
- then it is easier to subtract from the arrival time the
starting time, to divide the packet size with.