Ethereal-users: RE: [Ethereal-users] Reserved Fields

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Biot Olivier <Olivier.Biot@xxxxxxxxxxx>
Date: Thu, 26 Feb 2004 16:12:55 +0100
|From: Andy Low
|
|Hi,
|
|I am using the latest Ethereal software. I wondering whether is there
|viewable field for "Reserved field" in the TCP section? I 
|couldn't find it.

All protocol fields supported by Ethereal can be found by clicking on the
"Expression" button on the status bar at the bottom of the Ethereal window.

As you will see, there is currently no field showing the reserved bits of
TCP, except for the 2 most significant bits in the octet containing the
flags (CWR and ECN-Echo). If you are referring to those 2 bits, you can
search for packets with "tcp.flags >= 0x40" as display filter, or with
"(tcp.flags.cwr == 1) || (tcp.flags.ecn == 1)".

Regards,

Olivier