???? ID: 224829 - ????? ???????: 02 ?????? 2010 - ??????: 2.0 Windows 2000 ?? Windows Server 2003 TCP ???????? ?? ?????
?? ????? ?????????? ???? ????? ???? ?? ?? Microsoft Windows 2000 ?? Microsoft Windows Server 2003 ??? ?????????? TCP ?????????:
???? ??????????????????? ???, ????, ?? ????? ?? ????????? ?? ??????? ???? ?? ??? ????? ????? ??? ???? ???????, ??? ?? ????????? ?? ??? ??? ?? ??????? ???? ??? ?? ????? ???????? ??????? ?? ???? ???.. ?????, ????????? ???? ?? ?? ?? ????? ?? ??????????? ???? ???? ???.. ?????? ??????? ?? ???, ????????? ?? ??????? ???? ?? ???? ???? ??? ?? ???.. ???, ??? ??? ?????? ??????? ???? ?? ?? ?? ????????? ?? ???????????? ?? ???? ???.. ????????? ?? ??? ?? ???? ?? ???????????? ???? ?? ????? ?? ???? ??? ???? ??????? ?? ???, Microsoft ?????? ??? ??? ???? ????? ?? ??? ????? ???? ?????? ????? ????:: 322756
(http://support.microsoft.com/kb/322756/
)
??? ?? ???? ?? Windows ??? ????????? ?? ???????????? ???? ???? TCP ????? ?? ????TCP ??????? ????? ?? ???? ?? ?? ?????? ???? (??????) ??? ?? ??????? ???? ?? ????? ?????? ?? ???? ???? ?????? ????? ?? acknowledgment ?? ????? ???????????? ????? ?? ?????? ???? ?? ??? ????????? ???? ?????, ???? ???? ?? ???? ?? ?????? ??? ???? ???? Windows TCP/IP ????? self-tune ??????? ???????? ??? ????? ?? ??? ??????? ???? ??? ??, ?? ????? ????????? ?? ??? ??????? ????? ???? ?? ????? ???? ????? ????? ???? ?? ???? ???? ?????-coded ??????? ????? ?? ???? ??????? ????; TCP ??? ?? ?????? ???? (MSS), ?? ??????? ????? ?? ????? ???? ?? ?? ?? ?????? ?? ??? ???????? ???? ??? ??????? ????? ???? TCP ????? ???? ?????? ???? ????? ?? ????? utilized receive ????? MSS ?? ???? ?? ?? ???? ?? ??? ???????? ?????? ??? Receive ????? ?? ???? ????????? ????? ????? ?? ???? ??? ??:
?????? ???????, ?? ??? ????? ?? ???? ????? ??????? ??? ?? ??? ???? ?? 17,520 ?????? (16 K ???????? 1460-???? ?? ???? ?? ?????) ?? ???? ????? ?? ???? ?? ????????? TCP head ??????, ???? ?? ????? Acknowledgments (SACKS) ?? Timestamps ?? ?????? ???? ?? ?? ???? ???????? ?? ??? ??? ??????? ??????? ???? ?? ??? ?? ?? ???? ??? ?? ?? ?????? TCP ????? ??? ???? ?????? ?????? ?? ???? 20, ?? ??? ?? ?????? ???? ?? ??? ?? ?????? Windows NT ?? ????? ????????? ??? ??? ?????? ??????? ?? ??? ????? ?? ???? ?? 8,760 ?????? ?? ?? 1460-???? ???? ??? ??????? ??? ?? ??? receive ????? ?? ???? ??? ????, ???? ?? ??? TcpWindowSize ??? Windows ?? ???? ??????? ?? ??? ??????? ????????? ??????? ??? ??????? ??? ???? ?? ???, ????? ????? ?? ???? ????::
???:TcpWindowSize ?? globally ??? ??????? ?? ??? ????? ?? ???? ??? ???? ?? ??? ???????? ????? ????? ?? ???? ??? ?? ??????? TCP ???????????? ??? TCP ?????? ??????? ?????? ??? ???? negotiating ?? ??? ????? ??? ?? ??? Windows, ??? TCP ?????? ??? ?? ?? ??? ????? ????? ????????, ??? ??????, ????? ACK.????? ?????? ?? TCP ?????? ???:
??????: 0 ?????: 1 ??????: ?????? ???? ?? ??? ?????: ?? ????? ??? ?? ?? padding TCP ?? ????? ?????? ?? ??? ?????? ??? ??????: 1 ?????: 1 ??????: ??? ???????? ?????: ?? ????? ??? ?? ?? padding ?? ???????? ?? ?? ???? TCP ?????? ?? ???? ????? ?? ???? ????? ??????: 2 ?????: 4 ??????: ?????? ??? ???? Description: This indicates the maximum size for a TCP segment that can be sent across the network. Kind: 3 Length: 3 Option: Window Scale Option Description: Identifies the scaling factor to be used when using window sizes larger than 64k. Kind: 8 Length: 10 Option: Time Stamp Option Description: Used to help calculate the Round Trip Time (RTT) of packets transmitted. Kind: 4 Length: 2 Option: TCP SACK permitted Description: Informs other hosts that Selective Acks are permitted. Kind: 5 Length: Varies Option: TCP SACK Option Description: Used by hosts to identify whether out-of-order packets were received. Windows scalingFor more efficient use of high bandwidth networks, a larger TCP window size may be used. The TCP window size field controls the flow of data and is limited to 2 bytes, or a window size of 65,535 bytes.Since the size field cannot be expanded, a scaling factor is used. TCP window scale is an option used to increase the maximum window size from 65,535 bytes to 1 Gigabyte. The window scale option is used only during the TCP 3-way handshake. The window scale value represents the number of bits to left-shift the 16-bit window size field. The window scale value can be set from 0 (no shift) to 14. To calculate the true window size, multiply the window size by 2^S where S is the scale value. For Example: The following Network Monitor trace shows how the window scale option is used:If the window size is 65,535 bytes with a window scale factor of 3. True window size = 65535*2^3 True window size = 524280 TCP: ....S., len:0, seq:725163-725163, ack:0, win:65535, src:1217 dst:139(NBT Session) It's important to note that the window size used in the actual 3-way handshake is NOT the window size that is scaled. This is per RFC 1323 section 2.2, "The Window field in a SYN (for example, a [SYN] or [SYN,ACK]) segment itself is never scaled."TCP: Source Port = 0x04C1 TCP: Destination Port = NETBIOS Session Service TCP: Sequence Number = 725163 (0xB10AB) TCP: Acknowledgement Number = 0 (0x0) TCP: Data Offset = 44 (0x2C) TCP: Reserved = 0 (0x0000) + TCP: Flags = 0x02 : ....S. TCP: Window = 65535 (0xFFFF) TCP: Checksum = 0x8565 TCP: Urgent Pointer = 0 (0x0) TCP: Options + TCP: Maximum Segment Size Option TCP: Option Nop = 1 (0x1) TCP: Window Scale Option TCP: Option Type = Window Scale TCP: Option Length = 3 (0x3) TCP: Window Scale = 3 (0x3) TCP: Option Nop = 1 (0x1) TCP: Option Nop = 1 (0x1) + TCP: Timestamps Option TCP: Option Nop = 1 (0x1) TCP: Option Nop = 1 (0x1) + TCP: SACK Permitted Option This means that the first data packet sent after the 3-way handshake is the actual window size. If there is a scaling factor, the initial window size of 65,535 bytes is always used. The window size is then multiplied by the scaling factor identified in the 3-way handshake. The table below represents the scaling factor boundaries for various window sizes. ?? ?????? ?? ??????? ????
?????? ?? ???:: ??? ????? ???? ??? ????????? ?? 269000000 (269 M) ?? ??? ??? ??? ???? ??? ?? ?????, 3 ?? ??? handshake ?? ????? ???????? ?????? ?? 13, 12 ?? ??? ???????? ?????? ???? ?? ?????? ???? ??????? ??? ????? ?? ???? ?? 268,431,360 ?????? (268 M)? ?? ?????? ??? ????????? ????? ?? ???? ??????????? ??????? ???? ?? ?? ????: ???? ????? ????? ??????? 13 ?? ??? 65,535 ????? ????? ?? ???? ?? ??? ??? ????????? ??? ????? ??, ?? ???? ???? ??????? ??? ?? ???? ??, ?? Windows ?? ????? ?? ???? accommodates ????? ??? ?? ????? ???? ?? ?????? ???? ???????? ?? ???? TRUE = 65535 * 2 ^ 13 ????? ?? ???? TRUE = 536,862,720 ???????? ????? ?? ??????????? ?? ????????? ???? ?? ??? Tcp1323Opts ??? ????? ????????? ????? ??? ????? ?? ???? ??: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters
0 (RFC 1323 ?????? ?????) ?? ????????? ????????? RFC 1323 timestamps ?? ????? ?????? ???????? ????????? ???? ??? Timestamps ?? ???????? ??? ?? ?????? ????? ????????, ????? ???? ????? ?? ??? manipulated ?? ???? ???? 0 ???????? ????? ???????? ???, ?? 1 ???????? timestamps ??? ???1 (????? ????? ???? ????? ????) 2 (timestamps ???? ????? ????) 3 (????? ?????? ?????) Timestamps????, TCP/IP ????? ????? ?? ????? (RTT) ????? ????? ??? ?? ???? ???? ?? ??? ???? ??? ??? ???? ?? ????? ?? ????? ??? ???? ????? (retransmit ?????) ????? ???? ??? ??, ?? ?? ?? acknowledgment ??????? ??? ?? ?? ?? ??? ??? ???? ??? ??? ?????? ?? ???, ??? ????? ?? ???? ?? ?????? ??????? ?? 64,240 ?????? (44 ????? ?????) ???? ??? ??, ???????? 44 ????? ??? ?? ???? ?? ?? ?? ????? ?? ??? ????? ????? ??? ?? ??? ?? ??????? ????? ???? ????? ?? ?????? ???? 65,535 ?????? ??, ?? ??? ?? sampling ?? ?? ????????? ????? ????????, ?? ???? ????? ?? ?????? ???? ?? 1 ???????? ?? ????? ???? ???, ?? RTT sampling ?? ???????? ???? ???TCP ??????????? ?????? ?? ???? ??? ?? RTT ????, PAWS ???, ???? ???????? ???? ?? ??? ??? (???? ?? ACK) ?????? ????? ??????? deemed ?? ????? ?? ??? ??? ???? ?? ???? ?? on ???? ?? ???? ?? ????? ??, RTT ?? ???? ?? ?????? ??????? ???? ????? ?? ???? ?? ???? RTT retransmission ?????? ?? ???? ???? ?? ??? ????? ???? ???? ??? ????? RTT ?? retransmission timeouts ?? optimum ?????? ?? ??? ?????? ??? ????? TCP ??? ??????? ?? TCP ???? ??? ????? ???? ???? ??, ?? ???? ?? ???????? ?? ?????? TCP ??? ??? handshake (SYN ?????) ?? ???? ???? ????? ???? ???? ?? ?? ???? ?? ????? TCP ?????? ?? ????? ?? ?? ???? ???? TCP Timestamps ?????? (TSopt): ?? ?????? ?? ??????? ????
??????????? ?????? ????? ???? ?? ???? ??? ?? ??????? ?????? ????? TCP ?????? ????? ?? ??????? ???? ?? ?????? ???? ????? ?? ?? ??? ???: TCP: Timestamps ?????? ?????? ?????? ?? TCP: = Timestamps TCP: ?????? ????? 10 (0xA) = TCP: ??????????? 2525186 (0x268802) = TCP: ????? ??????????? 1823192 (0x1BD1D8) = Wrapped ??????? ??????? (PAWS) ?? ??????? ???????TCP ??????? ?????? ????? ?? ????? ?? 32 ?????, ?? ???? ?????? ?????? ?? ?????? ????? ???? ??? ???? ?????? ????????? ?? ?? ??? ???? ?? ??????????, ?? ??? ??? ????? traverses ??????? ?? ???? ??????? ?????? ?? ?????? ?? ??? ??????? ??? ??? ??? 1 Giga-???? ????? ????? (Gbps) ??????? ?? ???? ??? ??? ??, ??????? ?????? ??? 34 ????? ?? ??? ???? ??? ??? ????? ????? ??, ??? ???? ?????? ?? ??? ???? ????? ????? ????? ??????? ???? ????????? ??????? ?????? ?? ???? ??? confusion ?? ????, ?? ??? TCP ??????????? ????????? ??????? ?????? ?? ??? ??? ????? ???? ???? ??? ????? ?? ??????? ?? progressing ??? stamps ??? ???? ?????? ????? ???? ?????? ??? ??????? ?? ?? ?? ??? ?? ???????? Acknowledgements (SACKs)Windows ????? Acknowledgement ?? SACK ?? ??? ??? ????? ???????? ?????? ?? ??? ?????? introduces ??? SACK ??? TCP ????? ???? ?? ????? ???? ???? ??????? ?? ??? ????? ??? ?? ?????????? ??? SACK, ???? ?? ???? ??? ???????????? ??? ???? acknowledge ??????? ?? ?? ?? ?? ?????? ???? ?????? ?? ?????? ??????? ??????, ?? "?? ???? ??????" receive ?????? SACK ????? ??, ?? ??? ?????? receive ????? ?? ???? ?????? acknowledge ???? ?? ??? ACK ???? ?? ????? ???? ?? ??? ???? ???? ??, ????? ?? ?? ???? ??? ?? acknowledge ???? ????? ?? ??????? ??? ?? ???? ?? ???-??? ??? SACK TCP ????? ??? ?????? ?? ??? ??? ???? ????? ?? ?? ????? ???? ???SACK ?? ?????? ?? TCP ?????? ?? ????? ???? ??? TCP Sack-Permitted ?????? ?? ????? ???? ?? SYN ????? ??? (??? TCP ??????? establishment) ????? ???? ??? ?? ?? ????? ACK. ???? ?? ???? ??? ?? ??? ????? TCP ??????, TCP Sack ?????? ??? ???? ?? ?? ?? ???? ????? ???? ?? ??? acknowledgment ??? ???? ??? ??????? ?????? ?? ????? ?? ??????? ??? ?? ?? ??? ?? ???? ?? ??? ??? ?????? ???? ???? ?? ??? ?? ???? ?? ???? ?? ???? ?????? ?? ???? ??? 4 ?????? ?? TCP Sack-Permitted ?????? ??, ?????? 5 ?? TCP Sack ?????? ??? ????? ??? ?????? ??? ????? ?? ?? TCP ?????? ??? TCP Sack ?? ?????? ??: ?? ?????? ?? ??????? ????
TCP SACK ??????: ?? ?????? ?? ??????? ????
????? ?? SACK ????? (???????), ?? ??? ????? ?? ????? ?? ???????? ?? ???? ?? ??, ?? ?? ???? ??? ??????? ?????? ???? ?????? ???-?? ???? ??????? ???, ?? ???? ?? "holes" ???? ??? ??? ?????? ?? ??? ???? ?? ?? ???? ??? ??????? ??????????? ???? ??? ?? ???? retransmission ???? ???? ???????? ??? ?? retransmit ?? ?? ???? ???? SACK ?? SackOpts ????????? ???????? ?????? ????????? ??? ????? acknowledgements ?? ????? ?? ????????? ???? ?? ??? ????? ????????? ????? ??? SackOpts ??? ??????? ???? ?? ???? ??: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
????? ??????? ?????? ????? illustrates ???? ????? ??????? ?????? 54857341 ?? ??? ???? ?? ???? ?? ??????? ?????? 54858789 54861685 ?? acknowledging ??? ??? ???? ?? 54857341 ?? 54858788 ???? ?? ???? TCP:.... A., len:0, seq:925104 - 925104, ack:54857341, ???: 32722, src:1242 dst:139 TCP: ????? ????? = 0x04DA TCP: ?????? ????? ???? ???? ??? NETBIOS = TCP: ??????? ?????? 925104 (0xE1DB0) = TCP: Acknowledgement ???? 54857341 (0x3450E7D) = TCP: ???? ????? = 44 (0x2C) TCP: ??????? = 0 (0x0000) + TCP: ???? = 0x10:. A.... TCP: ????? 32722 (0x7FD2) = TCP: checksum = 0x4A72 TCP: ?????? ???? = 0 (0x0) TCP: ?????? TCP: ?????? Nop = 1 (0x1) TCP: ?????? Nop = 1 (0x1) + TCP: Timestamps ?????? TCP: ?????? Nop = 1 (0x1) TCP: ?????? Nop = 1 (0x1) TCP: SACK ?????? ?????? ?????? ?? TCP: = 0x05 TCP: ?????? ????? 10 (0xA) = TCP: ????? ??? ?? ?????? 54858789 (0x3451425) = ??? ?? ???? ?????? TCP: 54861685 (0x3451F75) = TCP retransmission ??????? ?? ??? retransmitTCP Retransmission??????? retransmission ??????? ?? ???????, ?? ??? ??? TCP ??????? ?? retransmission ????? ?? ???????? ???????? ??? ?? handed ???? ?? ??? ??????? ????????? (IP)? ??? ??? acknowledgment ??????? ??? ???? ??? ?? ??? ??? ???? ?? ??? ????? ?? ??????? ?????? ???? ??, ???? ?? ???? ??? retransmitted ??? ??? (RTO) retransmission ???????? ?? ???????? ?????? RFC 793 ??? ???? ?????? Smoothed ??? ????? ??? (SRTT) ?????? ?? ????? ??????? ?? ????????? ?? ??? ???? ?? ???? ????? ?? ??? ?? ??? ?? ??? ???????? retransmission ?? ?? ??? ?? ??? doubled ?? ??? ?? ?????????? ?? ????? ?? ??? ??, ?? TCP tunes ????? ?? ??????? ?? ??????? ????? ?? ???? ??? Retransmit TCP retransmits ???? ?? ??? ???????????? ?? ??? retransmission ????? ??????? ?????? ???? ?? ????? ???? ??????? ?? ?? ???? ?? ???? ??? ?????? ??? retransmit ?? ??? ??? ???? ???? ??? ?? ?????? ?? ?????? ???? ???? ??? ???????????? retransmits ??????? ???????? ?? ?? ??? ???? ??????? ?????? ?? ??? ???? ??????? ????, ?? ???? ??? ?? ???? ?? ?? ??? ???? ????? ?? ?? ?? ??? ????? ?? ????? ?? ?????? ?? ????? ???? ?? ???, ?????? ????? ?? ?? ACK, ?? ACK ?????? ??? ???? ?? ??? ??????? ?????? ???????? ??? ???????? ???????? TCP ??? ?? ?? ??? ?? ??? ??? ???? ?? ??? ?? ???? ?????? ?????? ACKs ?? ?? ??????? acknowledging ???? ??????? ?????? ?? ?? ??????? ???? ?? ??? ??????? ???? ??, ?? ?? ???? ?? ?? ????? ?? ?? ??? ??? ??? ?? ?? ?? ??? ?????? ??? ?????? ?? ????????, ?? ???? retransmission ????? ?? ??????? ?????? ???? ?? ??? ????????? ?? ??? ?? ?? ????? ??? ?? ????? ??????? ?? ???????????? ?? ??????????? ?? ??????? ?? ?? ????? ????? ????? ???? ????? ???? ???????? ??? ??, Windows resends ??? ??? ??? ??? ????? ???? ?? ?? ??????? ??????, (?? ACK ?? 2 ?????????) ?? ??? ??? ACKs ?? ?? ??????? ?????? lags ??????? ??? ?? TcpMaxDupAcks ????????? ???????? ?? ??? controllable ??? ???? ??? ??????? ???? ?? ??? ?????? ACKs ?? ?????? retransmits ?? ???????? ???? ?? ??? ????? ????????? ????? ??? TcpMaxDupAcks ??? ??????? ???? ?? ???? ??: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
?? ???????? ?? ?????? ?? ???? ?? ???? ?? ?? ?? ??????? ?????? ?? ??? "retransmit ??????" ??? ??? transit ????? ???? ????? ???? ??? ?? ?? ???: ????? ?? ??? ?????? ?? ?? ???? ????????? ACKs ?? ?????? ????????? ???? ??? ???? ???? ???? ??:
???? ?????? ??????????????????: ?? ???? ?? ???? ??????? ?? ????? ?? Microsoft ????-?????? ?????????? ?????? ?????? ???? ??? ??. Microsoft ???? ??? ????-???????? ?? ????-???????? ????? ?????? ?? ???? ???????? ???? ?? ???? ????? ????? ??? ?? ??? ?????? ?? ???? ???? ???? ??? ????? ??. ???????, ????-???????? ???? ????? ???? ???? ???? ???. ?????, ????????, ?????-???? ?? ??????? ?? ???????? ?? ???? ???, ???? ?? ??? ?????? ???? ???? ??? ????? ??? ?? ???? ??. Microsoft ??????? ??? ???? ?? ?????? ?? ??????????, ????????? ?? ??? ?????? ?? ???? ????? ?? ???? ???????? ?? ??? ???? ????? ?? ??? ????????? ???? ??. Microsoft ????-?????? ?????????? ?? ????? ?????? ?? ?? ??? ??. ?????????? ?? ??????? ????????? ??????? ??:224829
(http://support.microsoft.com/kb/224829/en-us/
)
| ???? ?????? ???? ?????? ??????
????????? ?????? ??????? ???????? ??????
|






Windows Live
Facebook
Twitter
Linkedin
Digg it
Yahoo
Delicious
StumbleUpon
Yammer
Reddit
Technorati
FriendFeed
Email

????? ?? ???? ????
