cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
360
Views
0
Helpful
3
Replies

Question on windowing

richlohman
Level 1
Level 1

I just got hit with a troubleshooting question today, and didn't know how to answer. What does it mean when a packet has a window size of 0? TIA.

Rich

3 Replies 3

prakkdangc
Level 1
Level 1

It's called "closing the window" and is usually sent by a device that is getting TCP information much faster than it can respond to. It probably was prefaced by a shrinking of the window first.

I have usually seen it with overtaxed servers.

Dave

Joseph W. Doherty
Hall of Fame
Hall of Fame

The receiving host is informing the sending host it's unable to accept any additional data. If this is seen, it's likely the receiving host does have some buffer space but is trying to avoid the TCP "silly window syndrome".

[edit]

The reason for this happening is the receiving host can't keep up with the sending host's tranmission rate. This shouldn't be common since most network media is generally "slower" compared to processing performance of most modern hosts. However, as also noted by Dave, a very busy host might be unable to keep up with incoming network data.

Thanks Joe & Dave. Excellent explanations.

Review Cisco Networking products for a $25 gift card