![]() TCP retransmissions due to RTO is worse than other causes of TCP retransmissions because depending on your TCP implementation, the flow can go to slowstart, congestion window (cwnd) can be cut in half and the performance is hit with major penalties. This is also sometimes referred to as TCP retransmission due to RTO (Retransmit Timeout). TCP Retransmissions - These are the normal (althought not so normal if it happens quite often) everyday retransmissions in which the Packets sent are not acknowledged by receiver within a certain amount time (derived from SRTT. Here is a good write-up RFC 6298 if you want to get more information on how RTO is calculated. This timer is dynamically adjusted according to RTT and other factors. ![]() Every TCP segment as it is sent to the IP layer has a timer associated with it and an ACK should be received before this timer expires. ![]() In Wireshark, TCP retransmissions are classified as one of three categories. After some investigation, I found out what these mysterious Spurious retransmissions really are. started to wonder what this really means. It reads " not being what it purports to be false or fake". First time I saw on "TCP Spurious Retransmissions" on Wireshark, I had to look up the definition of Spurious on Google as I've never heard that word before :). Wireshark 101: TCP Retransmissions and Duplicates, HakTip 133 86,439 views Hak5 - Cyber Security Education, Inspiration, News & Community since 2005.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |