Where is the Maximum Segment Size (MSS) information typically shown in Wireshark?

• A. In the IP header
• B. In the HTTP header
• C. In the TCP options of the handshake
• D. In the DNS section

Answer: (C)

Maximum Segment Size is a TCP parameter negotiated during the three-way handshake. It specifies the largest TCP payload the peer is willing to receive in a single segment and is carried in the TCP options field of the SYN and SYN-ACK packets. In Wireshark, you’ll find it by expanding the TCP header in a handshake packet and looking for the MSS option, often showing a value like 1460. This information lives at the transport layer, not in the IP, HTTP, or DNS sections, which is why it appears under TCP options rather than those other headers.