Let's dig into TCP SACK using Wireshark. Get out your copy and let's start digging!

You just had that new 10Gbps+ WAN link installed. Woo! It finally gives you a massive link between your key locations and promises to deliver amazing performance. To give it a nice trial run, you find a file on a server on the opposite side and pull it over. Seems a little sluggish. So you break out […]

With each passing year, tech is moving faster and faster. To try to keep up with it all, every year I set a goal of technologies to learn (or reinforce). Usually it involves buying a book or two, plunking down in front of some video content, and of course, getting some sample trace files so […]

There is a handy new feature in Wireshark 2.6 that just made looking at one of my favorite trace files a little more interesting. The tcptrace graph has been used by analysts for years to graph the efficiency of data transfers over TCP. It helps us to see sequence number increase over time, the receive […]

Hey packet people! If you have ever had to analyze a TCP connection, you have definitely seen a three-way handshake. In that handshake, both TCP stacks will exchange the options they are open to use for the connection. In the options field, you may also see several instances of the No-Operation value. How does this […]

In this video we will take a look at the TCP Maximum Segment Size value and how it works, contrasting it with the Ethernet/IP MTU value. We will also take a look at why these values are different and how the network can adjust MSS along the path, and how that impacts each end of […]