Ethereal-dev: Re: [ethereal-dev] DIsplay of flags in packet pane

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: andreas.sikkema@xxxxxxxxxxx
Date: Thu, 13 Apr 2000 09:25:26 +0200
> > I consider the following:
> >
> >     Flags: 0x0012 (SYN, ACK)
> >         ..0. .... = Urgent: Not set
> >         ...1 .... = Acknowledgment: Set
> >         .... 0... = Push: Not set
> >         .... .0.. = Reset: Not set
> >         .... ..1. = Syn: Set
> >         .... ...0 = Fin: Not set
> >
> Maybe I will change my mind when I know more.

What I _think_ Ben means is this:

  [+] Flags: 0x0012 (SYN, ACK)

Which can be expanded to:

  [-] Flags: 0x0012 (SYN, ACK)
      ..0. .... = Urgent: Not set
      ...1 .... = Acknowledgment: Set
      .... 0... = Push: Not set
      .... .0.. = Reset: Not set
      .... ..1. = Syn: Set
      .... ...0 = Fin: Not set

Not all (SMB for instance) protocols do this. They 
don't provide a summary in the first case, just 
the hex value:

  [+] Flags: 0x0012


-- 
Andreas Sikkema
andreas.sikkema@xxxxxxxxxxx
"Standing barefoot in a river of clues, most people would 
         not get their toes wet." - Brian Kantor in a.s.r.