3

How could I get the total size of a some data that has been transfered using UDP over a wireless channel from a Wireshark capture trace ? I have read somewhere that the sender advertise the total size of data to transmit before sending any actual data. However I could not spot that in my trace.

Improve this question
1
  • Did any answer help you? If so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you could provide and accept your own answer.
    – Ron Maupin ♦
    Feb 21, 2018 at 17:37

1 Answer 1

Reset to default
2

UDP is connectionless, i.e. the data consists of distinct UDP datagrams. There's no advertising in UDP itself but it's possible that the application level protocol on top of UDP uses something like that.

If you filter the Wireshark capture for the source IP address and UDP destination port you should get a good idea of the total data transmitted.

Improve this answer
2
  • Does TCP advertise the size of data it sends before expecting the ACK for that data?
    – defalt
    Nov 30, 2017 at 13:01
  • 2
    No. TCP doesn't advertise anything either. For the application/higher layer protocol, TCP is very much like a bidirectional data pipe (socket), similar to a serial connection. Negotiating object sizes and similar is usually only done in the application layer protocol.
    – Zac67 ♦
    Mar 28, 2018 at 9:10

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.