How could I get the total size of a some data that has been transfered using UDP over a wireless channel from a Wireshark capture trace ? I have read somewhere that the sender advertise the total size of data to transmit before sending any actual data. However I could not spot that in my trace.

  • Did any answer help you? If so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you could provide and accept your own answer.
    – Ron Maupin
    Feb 21 '18 at 17:37

UDP is connectionless, i.e. the data consists of distinct UDP datagrams. There's no advertising in UDP itself but it's possible that the application level protocol on top of UDP uses something like that.

If you filter the Wireshark capture for the source IP address and UDP destination port you should get a good idea of the total data transmitted.

  • Does TCP advertise the size of data it sends before expecting the ACK for that data?
    – defalt
    Nov 30 '17 at 13:01
  • 2
    No. TCP doesn't advertise anything either. For the application/higher layer protocol, TCP is very much like a bidirectional data pipe (socket), similar to a serial connection. Negotiating object sizes and similar is usually only done in the application layer protocol.
    – Zac67
    Mar 28 '18 at 9:10

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.