diff options
| author | Gerald Combs <gerald@wireshark.org> | 2020-04-25 14:43:48 -0700 |
|---|---|---|
| committer | Anders Broman <a.broman58@gmail.com> | 2020-04-26 06:16:37 +0000 |
| commit | e38e2df5a2b2bcc1c3fab83b9363049d2490d6f0 (patch) | |
| tree | 842a4c87f02dc898c3ec028ab4f343e57e9dfed0 /docbook | |
| parent | a1266a6363e6384fc93e67e0598c010e675fc611 (diff) | |
WSDG: Expand the zero window description.
Expand the description of the "TCP ZeroWindow" analysis flag.
Change-Id: Icf9b5cb60d305150eb13e5d74f4a4d2008fa96e4
Reviewed-on: https://code.wireshark.org/review/36938
Reviewed-by: Anders Broman <a.broman58@gmail.com>
Diffstat (limited to 'docbook')
| -rw-r--r-- | docbook/wsug_src/WSUG_chapter_advanced.adoc | 8 |
1 files changed, 7 insertions, 1 deletions
diff --git a/docbook/wsug_src/WSUG_chapter_advanced.adoc b/docbook/wsug_src/WSUG_chapter_advanced.adoc index e201e277fb..ccf8a2dbce 100644 --- a/docbook/wsug_src/WSUG_chapter_advanced.adoc +++ b/docbook/wsug_src/WSUG_chapter_advanced.adoc @@ -570,7 +570,13 @@ Set when the all of the following are true: [discrete] ==== TCP ZeroWindow -Set when the window size is zero and non of SYN, FIN, or RST are set. +Set when the receive window size is zero and none of SYN, FIN, or RST are set. + +The _window_ field in each TCP header advertises the amount of data a receiver can accept. +If the receiver can’t accept any more data it will set the window value to zero, which tells the sender to pause its transmission. +In some specific cases this is normal -- for example, a printer might use a zero window to pause the transmission of a print job while it loads or reverses a sheet of paper. +However, in most cases this indicates a performance or capacity problem on the receiving end. +It might take a long time (sometimes several minutes) to resume a paused connection, even if the underlying condition that caused the zero window clears up quickly. // TCP_A_ZERO_WINDOW_PROBE [discrete] |