I'm learning TCP networking by analysing the uploading of a large file to a web server.
During the syn, syn/ack, ack, the server and the client agree on Maximum Segment Size = 1460
. This is consistent with what I read on the net.
But from my Wireshark capture I can see that each TCP segment actually contains 2776 bytes of data.
Clearly these are two different things and I've misunderstood something.
My question is:
How/When/Where does the length of data of TCP segments get decided?