I want to calculate the time that the 3 way TCP handshake occupies through wireshark between a server and a client.
I get something like:
Time Source Destination Info 0.00 x.x.x.x y.y.y.y SYN 0.020003 y.y.y.y x.x.x.x SYN,ACK 0.000077 x.x.x.x y.y.y.y ACK 0.000223 x.x.x.x y.y.y.y GET
To calculate the duration of the handshake, I have to calculate the duration from the transmit of SYN, to the receive of the ACK by the server. When does the server receive the ACK? Can we see this from the client side?
Another question I have is about the time in various steps. 0.02 sounds like a reasonable time and about what I would expect for the RTT between the server and the client. But why are the rest so low? 0.000077? 0.000223? What do they represent?