0% found this document useful (0 votes)
4 views

TCP timestamp - Network Analysis Using Wireshark 2 Cookbook

The document discusses the use of TCP timestamps for measuring round trip time (RTT) in network analysis. It explains how the TCP timestamp option includes two fields, TSval and TSecr, which are used by the sender and receiver to compute RTT. The sender utilizes these fields in the acknowledgment segment to efficiently measure RTT across segments.

Uploaded by

agcolab92
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
4 views

TCP timestamp - Network Analysis Using Wireshark 2 Cookbook

The document discusses the use of TCP timestamps for measuring round trip time (RTT) in network analysis. It explains how the TCP timestamp option includes two fields, TSval and TSecr, which are used by the sender and receiver to compute RTT. The sender utilizes these fields in the acknowledgment segment to efficiently measure RTT across segments.

Uploaded by

agcolab92
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 1

TCP timestamp - Network Analysis Using Wireshark 2

Cookbook
oreilly.com/library/view/network-analysis-using/9781786461674/21a31d69-8158-4fbe-89dd-7a52938c3f13.xhtml

TCP timestamp
There are certain end applications that benefits from continuous round trip time (RTT)
measurement. RTT measurement is performed by leveraging the TCP timestamp options. A
TCP timestamp option will be included in all the segments. This option carries two fields as
TSval and TSecr. The the sender will include local time when the segment is sent out in
TSval field and TSecr will be set to 0. The receiver upon acknowledging a segment will
include local time in the TSval and include the TSval from the last received segment from the
sender.

The sender will use the combination of TSval and TSecr in the ACK segment to compute the
RTT. For efficiency, most implementation will perform RTT measurement in one or two
segments in each window ...

1/1

You might also like