Posts

Showing posts with the label wireshark

Data transmission over TCP

Image
Data transmission over TCP In the first article we discussed how the TCP connection initiation and termination is performed and how we can see this in Wireshark. In this article, we will discuss the actual TCP data transmission procedure. TCP analysis articles TCP connection establishment and termination Data transmission over TCP The happy scenario TCP is using the cumulative acknowledgement approach, in which the TCP receiver is normally sending an ACK that represents the amount of contiguous data it got. The procedure of TCP transmission is as follows At the connection start, each side of the connection picks some random number called initial sequence number ISN. This number represents the number of the first byte this side will send to the other side. To make analysis easier, Wireshark will show this field starting from 0 but you can get the actual sequence number from the raw sequence number field on the Wireshark expert view. For each byte sent, the transmitting sid...

Basic TCP analysis with Wireshark - Part 1

Image
Basic TCP analysis with Wireshark TCP is a reliable connection-based protocol that is used by many of the application layer protocols we use every day. HTTP, HTTPS, and FTP are only a few examples from the list. This is the first article in a series that illustrates the basics of the TCP protocol and its analysis using Wireshark. Basic knowledge of how to use Wireshark is needed. TCP analysis articles TCP connection establishment and termination Data transmission over TCP What is TCP There are many transport layer protocols, from which TCP and UDP are the most popular. TCP is an acronym for T ransmission C ontrol P rotocol and it has the following characteristics Connection based: In TCP, a connection is established between the two communicating hosts and the state of this connection is maintained on the two hosts. Usually, the two hosts are named client and server and the client is the host who initiates the connection to the server. Reliable: TCP is a reliable protocol. ...