New answers tagged

1

I am not really sure I understand what is the end goal here but technically there is a way to achieve what you're looking for. In order to do this you'd need to capture the beginning of the TCP conversation as this is the only place where during the three-way handshake parameters are agreed. Those parameters are quite important when it comes to TCP window (...


2

How to determine the distinct TCP segments or IP packets or fragments within a TCP Window? Each segment is sent in a separate IP packet. Once reassembly of the original stream has started within the receive buffer (or window, if you like), you cannot make out which data went in which segment any more. While the segments are still in transport, you can see ...


0

Some transport-layer protocols segment data and/or provide reliable transport, e.g. TCP - others don't, like UDP. Segmentation doesn't make the transport reliable. The source uses a tracking buffer (send window) and keeps resending segments that haven't been acknowledged within a reasonable time frame. Segmentation and reliability are services for the upper (...


3

(At least) two reasons: The transport layer (TCP) has to keep track of segments so it can retransmit them if needed. If you let the network layer segment, and one segment gets lost, how would the transport know? In theory, the sender knows the MSS of the path. By adjusting the size at the beginning, it eliminates the need for a downstream router to ...


1

In additional to duplicate ACKs, a receiver may (and should) use selective ACKs to indicate successful reception beyond the missing segment(s). Selective ACKs were addded by RFC 2018 in 1996 to avoid the inefficiency of purely cumulative ACKs.


0

Tracing the path of packets works by sending packets with different TTL and expecting routers on the way to discard packets if the TTL is exceeded and send a ICMP TTL exceeded back. The source IP of the ICMP TTL exceeded is the IP address of the router on the path. While routers will discard packets if TTL is reached, they will not send a ICMP TTL exceeded ...


2

Can someone please tell me what the difference in delivery of a pure ack packet and a data packet is? The difference is just that the one contains data (application payload) while the other does not. If a packet contains data it needs to be acknowledged by the recipient. If it does not contain data it will not be acknowledged. This means that a loss of the ...


Top 50 recent answers are included