So yeah, every time the window advances, a segment or two gets lost and wireshark notes duplicate ACKs. But it started with a lost segment, not with a window update. As I said previously, the timeout can occur before the ping leaves the send queue because the peer may never accept the ping. In this case the proper behavior is…