How TCP Works - The Timestamps Option

preview_player
Показать описание
In the TCP header, you may see a scary-looking 4 byte number in the Timestamp option. What is this thing and how TCP use it? Let's dig.

Like/Share/Subscribe for more Wireshark content!

== More Training from Chris ==

== Live Wireshark Training ==

== Private Wireshark Training ==
Рекомендации по теме
Комментарии
Автор

good video, good explanation of a TCP option that's not covered in most courses

RichardRauscher
Автор

Chris, you are a lifesaver. Now I am actually able to understand what's going on with my class assignments! I will look at all your Wireshark videos for sure

mertkurt
Автор

Oh Chris, you couldn't have picked a better time to release the video. Thank you sir.

XanderPetty
Автор

Hy Chris i'm Claudio again... i'm not able to understand the value of timestamps: i have tried to make calculation with the file provided but the result is wrong: can you make me some examples with real calculation base on the file you provided? thank's in advance!!

claudiotonelli
Автор

RFC 1323 also talks about window scaling as well

BuickGeek
Автор

Hi Chris.
Can the difference in timestamps indicate a man in the middle attack?

Автор

Hi Chris, I have been getting vulnerability mentioning TCP timestamp is enabled. What are the consequences if i disable TCP timestamp in my Firewall for the packets? can u please guide

pankitsomaiya
Автор

How 2 analysis tls based malicious pcaps files?? I mean how can we distinguish between benign file and malicious file... thanks

abhaypratap