On 5 Déc, Kevin Gibbs wrote: > So if a connection is set-up with a > WS=2 then the values reported by TCPDump will be n/4 _NOT_ n. You have to > look at the first two packets exchanged to determine the value of WS. > Your values are more like; for 128K -> 95568 and for 240K -> 182448. It > is working correctly you just need to do more work. > I think tcptrace does this work for you. And others. <http://www.tcptrace.org/>