I think Ethereal is correct here.
If you look in the SYN packet for that direction of the TCP session I think
you will
see that window scaling is used and the window scaling option is 7 (bits)
----- Original Message -----
From: "Markus Rehbach"
Sent: Thursday, July 29, 2004 7:35 PM
Subject: [Ethereal-users] Window scaling and relative sequence numbers
> Hi all,
>
> there seems to be a problem in 0.10.5 and probably older ones.
>
> If preference is 'tcp.relative_sequence_numbers: TRUE' there is a wrong
> value shown for the window size (3rd line below: Win=747520 should be
5840).
>
> 0.070763 a -> b TCP 32985 > imap [SYN] Seq=0 Ack=0 Win=5840 Len=0
MSS=1460 TSV=3609664 TSER=0 WS=7
> 0.071129 b -> a TCP imap > 32985 [SYN, ACK] Seq=0 Ack=1 Win=5840 Len=0
MSS=1460
> 0.071176 a -> b TCP 32985 > imap [ACK] Seq=1 Ack=1 Win=747520 Len=0
>
> If preference is 'tcp.relative_sequence_numbers: FALSE' it looks good.
>
> 0.076386 a -> b TCP 32991 > imap [SYN] Seq=4090487846 Ack=0 Win=5840
Len=0 MSS=1460 TSV=4006974 TSER=0 WS=7
> 0.076748 b -> a TCP imap > 32991 [SYN, ACK] Seq=3661596958
Ack=4090487847 Win=5840 Len=0 MSS=1460
> 0.076798 a -> b TCP 32991 > imap [ACK] Seq=4090487847 Ack=3661596959
Win=5840 Len=0
>
> Problem shows up in ethereal and tethereal (no surprise;-).
>
> Markus
>
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
>