CODEWITHSUNDEEP
network-programmingtcpwireshark
Daniel Robinson
Daniel Robinson

Reputation: 14868

what does this wireshark info refer to

I am new to wireshark and to networking in general, but I am monitoring the traffic of my application and I can filter on it so I can see when it is actively transfering data that it is supposed to with the server but wireshark shows this:

protocol = TCP
length = 54
info = 56705 > ms-wbt-server [ACK] Seq=1 Ack=61 Win=252 Len=0

being fired every second from my app to my app server. Why does my application keep sending these packets every second?

It is a c# .net app if that is of any assistance.

Upvotes: 6

Views: 19245

Answers (2)

Fiach Reid
Fiach Reid

Reputation: 7059

ms-wbt-server is port 3389, and is used for the Remote Desktop Protocol (RDP), do you have a remote desktop connection open to your server by any chance?

Upvotes: 7

Vicky
Vicky

Reputation: 13244

It's a TCP keepalive packet, containing no data but with the ACK flag set. Just tells the other end you are still there, and keeps the connection open.

There's a good overview here: http://tldp.org/HOWTO/TCP-Keepalive-HOWTO/overview.html

Upvotes: 7

Related Questions