8.24. TCP Stream Graphs

Show different visual representations of the TCP streams in a capture.

Time Sequence (Stevens)
This is a simple graph of the TCP sequence number over time, similar to the ones used in Richard Stevens’ “TCP/IP Illustrated” series of books.
Time Sequence (tcptrace)
Shows TCP metrics similar to the tcptrace utility, including forward segments, acknowledgements, selective acknowledgements, reverse window sizes, and zero windows.
Throughput
Average throughput and goodput.
Round Trip Time

Round trip time vs time or sequence number. RTT is based on the acknowledgment timestamp corresponding to a particular segment. The sampling method selects which segments are taken into account and how the RTT is computed:

  • All Data Packets, all segments carrying data are computed, and when present, SACK is ignored.
  • All Data Packets w/ SACK, all segments carrying data are computed, the RTT value is based on SACK if present.
  • Data Packets matching RTT, only segments with a corresponding RTT value in the packet list are computed.
  • Data Packets matching Karn RTT, only segments with a corresponding RTT value in the packet list are computed, ambiguous ACKs following Karn’s definition are excluded.
Window Scaling
Window size and outstanding bytes.