TCP/IP Analyzer readings

Ddeath · Post by **Ddeath** » Sun Nov 11, 2001 5:43 am

I am wondering what is wrong with the analyzer readings for my DefaultRcvWindow? I keep getting a RWIN reading of 1460 even though I have set it in the registry to 256960. The RWIN scaling (RFC1323) is shown to be 0 bits. I have been to other similiar sites and they are able to show my RWIN as 256960. Any idea what have I missed out? Or is the analyzer working properly at all?

EvilAjax · Post by **EvilAjax** » Sun Nov 11, 2001 6:52 am

It's working for me.

Do you have a router?
Do you have proxy enabled?
Who is your internet service provider?
What are the sites that are showing you the RWIN of 256960?

Some sites only seek out what's in the registry, and not what actually's getting out. So if it's not getting out, it's not setup correctly.

Ddeath · Post by **Ddeath** » Mon Nov 12, 2001 4:35 am

No router man... my isp is singapore cable vision (scv). I went to pcpitstop and they show me my rwin to be what I set... so you are saying I am not getting the rwin as what I set in the registry?? Proxy... must go back home to check... but I think not.

EvilAjax · Post by **EvilAjax** » Mon Nov 12, 2001 5:26 am

Pcpitstop uses active x and reads what you have in your registry, and not what's getting out.

Check to see if you have proxy enabled.

Ddeath · Post by **Ddeath** » Mon Nov 12, 2001 7:16 am

Nope. The "Use a proxy server" is disabled. And "Never dial a connection" is enabled. Hmm... what else should I check for?

Ddeath · Post by **Ddeath** » Mon Nov 12, 2001 7:25 am

Anyway, here's what I am getting from the analyzer:

TCP options string = 020405b4

MTU = 1500
MTU is fully optimized for broadband.

MSS = 1460
Maximum useful data in each packet = 1460, which is equal to MSS.

Default Receive Window (RWIN) = 1460
RWIN Scaling (RFC1323) = 0 bits
Unscaled Receive Window = 1460
RWIN is a multiple of MSS
Other values for RWIN that might work well with your current MTU/MSS:
513920 (MSS x 44 * scale factor of 8)
256960 (MSS x 44 * scale factor of 4)
128480 (MSS x 44 * scale factor of 2)
64240 (MSS x 44)

bandwidth * delay product:
Your RcvWindow limits you to: 58.4 kbps (7.3 KBytes/s) @ 200ms
Your RcvWindow limits you to: 23.36 kbps (2.92 KBytes/s) @ 500ms
Consider increasing your RWIN value to optimize TCP/IP for broadband.

MTU Discovery (RFC1191) = ON

Time to live left = 108 hops
TTL value is ok.

Timestamps (RFC1323) = OFF

Selective Acknowledgements (RFC2018) = OFF

IP type of service field (RFC1349)= 00000000

funky · Post by **funky** » Mon Nov 12, 2001 4:58 pm

http://www.cyberwizardpit.com/article6.htm

Read and delete the Proxy if it's there.

Also, download the SG patches, they may help you fix your Analyzer problems. Reboot after install.

fox_k · Post by **fox_k** » Tue Nov 13, 2001 1:42 am

I am having the same problem that he is having. I am not behind a router,firewall, or proxy. I have all the latest drivers, etc. I am editing my reg. using Cablenut. Below is what I return:

**My stats are: Communicomm cable modem 1.5Mb, COM21 cable modem.
Windows 98SE, 1.4 Athalon, 320 Ram. Everything below is correct except my RWIN is set to 32120/

///////////////
TCP properties for IP = 24.143.30.40 ()
Note: Read the FAQ if the above is not your IP address.
Browser/OS = Mozilla/4.0 (compatible; MSIE 5.5; Windows 98)

TCP options string = 020405b401010402

MTU = 1500
MTU is fully optimized for broadband.

MSS = 1460
Maximum useful data in each packet = 1460, which is equal to MSS.

Default Receive Window (RWIN) = 1460
RWIN Scaling (RFC1323) = 0 bits
Unscaled Receive Window = 1460
RWIN is a multiple of MSS
Other values for RWIN that might work well with your current MTU/MSS:
513920 (MSS x 44 * scale factor of 8)
256960 (MSS x 44 * scale factor of 4)
128480 (MSS x 44 * scale factor of 2)
64240 (MSS x 44)

bandwidth * delay product:
Your RcvWindow limits you to: 58.4 kbps (7.3 KBytes/s) @ 200ms
Your RcvWindow limits you to: 23.36 kbps (2.92 KBytes/s) @ 500ms
Consider increasing your RWIN value to optimize TCP/IP for broadband.

MTU Discovery (RFC1191) = ON

Time to live left = 51 hops
TTL value is ok.

Timestamps (RFC1323) = OFF

Selective Acknowledgements (RFC2018) = ON

IP type of service field (RFC1349)= 00000000

28625 connections tested since 03.10.2001.
Analyzer version: Beta 0.99
/////////////////////////

I also used a TCP/IP Analyzer from another website "www.dslreports.com/tweaks", which uses a Java Applet, and I get the correct settings that are in my registry.

What am I doing wrong, or what can I do to fix this? Please let me know what other info I can post to help out in anyway.

Thank you very much for your time.

Fox k

Ddeath · Post by **Ddeath** » Tue Nov 13, 2001 2:43 am

Hey Fox k... you seems to be having the same prob.... There are no defined proxy server in my setup. Eugene, I have also applied all the patches, but nothing seems to work. Hmm.. what else can I do? Any guru around to help?

piranha · Post by **piranha** » Tue Nov 13, 2001 8:20 am

Are you sure you well installed SG patch ?

Download dont install it. You have to unzip it, RIGHT clic on unzip files, clic on Install and reboot

fox_k · Post by **fox_k** » Tue Nov 13, 2001 10:03 am

Ok....done. I reinstalled the SG patches that apply to me. Downloaded them, Uniziped them, then installed them. The files I installed were: PH_Webtweak9x, sguide_tweak_98, and 236926USA8(win98 vtcp.386 fix). I checked what changed in my registry:

///////////////////////////
+**TCP options string = 020405b40103030201010402

MTU = 1500
MTU is fully optimized for broadband.

MSS = 1460
Maximum useful data in each packet = 1460, which is equal to MSS.

Default Receive Window (RWIN) = 1460
+**RWIN Scaling (RFC1323) = 2 bits
+**Unscaled Receive Window = 365
RWIN is a multiple of MSS
Other values for RWIN that might work well with your current MTU/MSS:
513920 (MSS x 44 * scale factor of 8)
256960 (MSS x 44 * scale factor of 4)
128480 (MSS x 44 * scale factor of 2)
64240 (MSS x 44)

bandwidth * delay product:
Your RcvWindow limits you to: 58.4 kbps (7.3 KBytes/s) @ 200ms
Your RcvWindow limits you to: 23.36 kbps (2.92 KBytes/s) @ 500ms
Consider increasing your RWIN value to optimize TCP/IP for broadband.

MTU Discovery (RFC1191) = ON

Time to live left = 51 hops
TTL value is ok.

Timestamps (RFC1323) = OFF

Selective Acknowledgements (RFC2018) = ON

IP type of service field (RFC1349)= 00000000
///////////////////////////////////////////

The only thing diffrent in my Registry than what is posted is that my RWIN is set to 256960.

Any suggestions?

piranha · Post by **piranha** » Tue Nov 13, 2001 10:18 am

fox_k

the rwin in the tcp/ip test is 1460 and not 256960

Is cablenut install ?

fox_k · Post by **fox_k** » Tue Nov 13, 2001 10:32 am

piranha:

Yes, in my test my Rwin showed up as 1460 instead of what I have in my Registry which is 256960.

When I first started tweeking I used the SG patches. I wanted to find the right RWIN for my cable modem, so I started using Cablenut to fine tune everything. When I came to this message board for help with my incorrect RWIN value I reran the patches twice in my system.

piranha · Post by **piranha** » Tue Nov 13, 2001 12:36 pm

fox_k

it is a very strange problem

All i can say, you must always installed cablenut prior to all patch. If not, cablenut install will bring back all Windows default settings

Are you in an home network or have router/hub ??

fox_k · Post by **fox_k** » Tue Nov 13, 2001 2:09 pm

The two most recent times I ran the patches I had cablenut installed.

I am at home, no router, firewall, or hub.

piranha · Post by **piranha** » Tue Nov 13, 2001 8:16 pm

I asked Lobo to come help you because i dont know how to help you. Sorry.

HalfLifer · Post by **HalfLifer** » Tue Nov 13, 2001 8:21 pm

Did you reboot?

Lobo like left, and he would be clueless too with his pre-recorded message.

piranha · Post by **piranha** » Tue Nov 13, 2001 8:46 pm

I called an angel and the devil come..... ha ha ha ha

HalfLifer · Post by **HalfLifer** » Tue Nov 13, 2001 8:49 pm

Wow...hilarous. Almost spilled my water..

piranha · Post by **piranha** » Tue Nov 13, 2001 9:02 pm

your avatar inspired me....

dont you noticed I already told him to reboot

HalfLifer · Post by **HalfLifer** » Tue Nov 13, 2001 9:04 pm

Nope, didnt see it.

fox_k · Post by **fox_k** » Tue Nov 13, 2001 11:05 pm

Ive rebooted more times than Bob. Still same results

Ddeath · Post by **Ddeath** » Wed Nov 14, 2001 2:39 am

Hey guys, I have done all the same stuff as fox_k and like him I am getting the same results. Sigh... However, I have ZoneAlarm installed.. dunno whether this effects the results.. I am gonna disable it and try one more time...

Ddeath · Post by **Ddeath** » Wed Nov 14, 2001 2:43 am

Well... still the same... sigh..... help!!

TCP options string = 020405b40103030201010402

MTU = 1500
MTU is fully optimized for broadband.

MSS = 1460
Maximum useful data in each packet = 1460, which is equal to MSS.

Default Receive Window (RWIN) = 1460
RWIN Scaling (RFC1323) = 2 bits
Unscaled Receive Window = 365
RWIN is a multiple of MSS
Other values for RWIN that might work well with your current MTU/MSS:
513920 (MSS x 44 * scale factor of 8)
256960 (MSS x 44 * scale factor of 4)
128480 (MSS x 44 * scale factor of 2)
64240 (MSS x 44)

bandwidth * delay product:
Your RcvWindow limits you to: 58.4 kbps (7.3 KBytes/s) @ 200ms
Your RcvWindow limits you to: 23.36 kbps (2.92 KBytes/s) @ 500ms
Consider increasing your RWIN value to optimize TCP/IP for broadband.

MTU Discovery (RFC1191) = ON

Time to live left = 44 hops
TTL value is ok.

Timestamps (RFC1323) = OFF

Selective Acknowledgements (RFC2018) = ON

IP type of service field (RFC1349)= 00000000

43735 connections tested since 03.10.2001.

funky · Post by **funky** » Wed Nov 14, 2001 2:49 am

I do believe that the Analizer is down or not fixed, since it's working for me. However, a email is sent to Philip regarding this matter. Wait just a little bit longer..

funky · Post by **funky** » Wed Nov 14, 2001 2:53 am

Also, it may also be an ISP problem/Restriction. I have heard from the past that some ISP do that to slow down your use of extra bandwidth. Ask the tech support regarding this matter.

Ddeath · Post by **Ddeath** » Wed Nov 14, 2001 3:31 am

Hmm.. I don't think its the ISP restriction since my friends who has the same provider don't see this problem. Thanks for yr help anyway. I just hv to keep checking thru my system to see if I can find out what's wrong with it.

funky · Post by **funky** » Wed Nov 14, 2001 3:37 am

Search registry for the number 1460 that's not MSS. Report back on whichever Value that showed up.

Ddeath · Post by **Ddeath** » Wed Nov 14, 2001 4:01 am

Hi Eugene, searched through.. nothing showed up.

funky · Post by **funky** » Wed Nov 14, 2001 4:26 am

Not even MSS? O_o

Ddeath · Post by **Ddeath** » Wed Nov 14, 2001 4:37 am

Hmm.. I thought that MSS is automatically calculated by Windows based on the MTU settings?

Ddeath · Post by **Ddeath** » Wed Nov 14, 2001 7:41 am

Anyway, I added the DefaultMSS=1460 into the registry but it's still the same old ****...

piranha · Post by **piranha** » Wed Nov 14, 2001 8:06 am

Did you enable proxy here : Start, programs, accessories, communications, internet connection wizard, see if use proxy is checked in there

Post by **Philip** » Wed Nov 14, 2001 11:34 am

Originally posted by Ddeath
Anyway, here's what I am getting from the analyzer:

TCP options string = 020405b4

MTU = 1500
MTU is fully optimized for broadband.

MSS = 1460
Maximum useful data in each packet = 1460, which is equal to MSS.

Default Receive Window (RWIN) = 1460
RWIN Scaling (RFC1323) = 0 bits
Unscaled Receive Window = 1460
RWIN is a multiple of MSS
Other values for RWIN that might work well with your current MTU/MSS:
513920 (MSS x 44 * scale factor of 8)
256960 (MSS x 44 * scale factor of 4)
128480 (MSS x 44 * scale factor of 2)
64240 (MSS x 44)

bandwidth * delay product:
Your RcvWindow limits you to: 58.4 kbps (7.3 KBytes/s) @ 200ms
Your RcvWindow limits you to: 23.36 kbps (2.92 KBytes/s) @ 500ms
Consider increasing your RWIN value to optimize TCP/IP for broadband.

MTU Discovery (RFC1191) = ON

Time to live left = 108 hops
TTL value is ok.

Timestamps (RFC1323) = OFF

Selective Acknowledgements (RFC2018) = OFF

IP type of service field (RFC1349)= 00000000

The analyzer shows that your Tcp1323Opts value in the Registry is 0. you have to change it to 1 or 3 in order to enable RWIN scaling.

What Operating System ?

piranha · Post by **piranha** » Wed Nov 14, 2001 9:08 pm

Philip

yes scaling is 0 but why 1460 and not 65535 ?? But you are right, we all forget to check the OS (and need of patch vtcp386)

fox_k · Post by **fox_k** » Wed Nov 14, 2001 10:00 pm

My OS is Win98SE, and my vtcp.386 has been patched with a plesent looking spackle. Ive tried testing it with values above the 65K barrier with and without scaling on, and below the 65K barrier with and without scaling on. Still it only displays 1460 as my RWIN. Im currently downloading at an average of 600 to 900 Kbps, and uploading from 350 to 490 kbps. I dont know if that provides any useful information though.

Fox k

piranha · Post by **piranha** » Wed Nov 14, 2001 10:36 pm

If i well understand rwin is always 1460 even with the vtcp.386 patch.

Well, you can tried to uninstall everything and start again or try w9x cable CCS in cablenut, right click on it, clic apply, confirmation, close cablenut and reboot. I am not confident it will works but what else to do ??

Ddeath · Post by **Ddeath** » Thu Nov 15, 2001 12:41 am

I have changed the Tcp1323Opts to 1 but I am still getting the RWIN at 1460. If I set the rwin in the registry to 256960, I see the scaling to be 2 bits. And if I set it to 128480, it is 1 bit. However the RWIN is still 1460 no matter what. The unscaled rcv window changes to a smaller value than 1460 based on the bits.

Like fox_k, I hv win98se WITH the patch vtcp.386, but it's still the same.

Pirahna, I will check the accessories part tonight when I get back home after work. And the cablenut thing doesn't work either.

Anything else I should look out for??

cablenut · Post by **cablenut** » Thu Nov 15, 2001 1:07 am

Originally posted by Philip

The analyzer shows that your Tcp1323Opts value in the Registry is 0. you have to change it to 1 or 3 in order to enable RWIN scaling.

What Operating System ?

Philip the Analyzer has reported my RWIN as 2048 for about the past four to five months, before that it reported my RWIN correctly. When I did a TCP sniff on the output I noticed my first SYN packet had a window advertised as 2048. I noticed you get the MSS by setting the TCP MSS (Code 2) option field correct?

Ddeath · Post by **Ddeath** » Thu Nov 15, 2001 10:23 am

Eh.. I did not install the Internet Connection Wizard... Anyway, isn't Tools->Internet Options->Connections enough to tell you if u hv the proxy enabled or not?