What does TCP Zero Window Mean?

What does TCP Zero Window Mean?

Zero Window is something to investigate.

TCP Zero Window is when the window size in a machine remains at zero for a specified amount of time.

This means that a client is not able to receive further information at the moment, and the TCP transmission is halted until it can process the information in its receive buffer.

TCP window size is the amount of information that a machine can receive during a TCP session and still be able to process the data. think if it like a TCP receive buffer. when a machine initiates a TCP connection to a server, it will let the server know how much data it can receive by the window size.

in customized Windows machines, this value is around 64512 bytes. as the TCP session is initiated and the server begins sending data, the client will decrement It's window size as this buffer fills. at the same time, the client is processing the data in the buffer, and is emptying it, making room for more data. through tcp ack frames, the client informs the server of how much room is in this buffer. if the TCP window size goes down to 0, the client will not be able to receive any more data until it processes and opens the buffer up again. in this case, protocol expert will alert a "Zero Window" in expert view.

Troubleshooting a Zero Window for one reason or another, the machine alerting the Zero Window will not receive any more data from the host. it cocould be that the machine is running too processing processes at that moment, and its processor is maxed. or it cocould be that there is an error in the TCP receiver, like a Windows Registry misconfiguration. try to determine what the client was doing when the TCP Zero Window happened.

Source: flukenetworks.com