Consider this short Wireshark packet capture on Windows Server 2016:
TCP Window Size of client (192.168.201.5) is 1504 bytes.
TCP Server responded back with a packet (length 1083).
TCP Payload: 1029 bytes TCP Seq No: 1
Without waiting for acknowledgment of previous packet, server sent another packet (length 1414).
TCP Payload: 1360 TCP Seq No: 145
So in order to maximise the payload transfer:
- Server sent
1..1029bytes of data in first packet.
- server sent
145..1504bytes of data in second packet.
- Effectively both packets contain
This server is talking to small devices whose TCP stack is not powerful enough to assemble the packets containing overlapping data. So the session fails (TCP reset in Frame-12).
Is there any way to configure Windows so that it sends simpler (non-overlapping) packets?
EDIT You can download the pcap file for full details.
Download pcap file of full session This session can be seen by applying a filter
tcp.port == 50002 and ip.addr == 192.168.201.5