https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5235
Sam Liao <phyomh@xxxxxxxxx> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |phyomh@xxxxxxxxx
--- Comment #1 from Sam Liao <phyomh@xxxxxxxxx> 2010-09-26 08:15:20 PDT ---
<proto name="tcp" showname="Transmission Control Protocol, Src Port: 44120
(44120), Dst Port: 48051 (48051), Seq: 0" size="16" pos="42">
<field name="tcp.srcport" showname="Source port: 44120 (44120)" size="2"
pos="42" show="44120" value="ac58"/>
<field name="tcp.dstport" showname="Destination port: 48051 (48051)"
size="2" pos="44" show="48051" value="bbb3"/>
<field name="tcp.port" showname="Source or Destination Port: 44120"
hide="yes" size="2" pos="42" show="44120" value="ac58"/>
<field name="tcp.port" showname="Source or Destination Port: 48051"
hide="yes" size="2" pos="44" show="48051" value="bbb3"/>
<field name="tcp.stream" showname="Stream index: 0" size="0" pos="42"
show="0"/>
<field name="tcp.len" showname="TCP Segment Len: 12" hide="yes" size="1"
pos="54" show="12" value="17"/>
<field name="tcp.seq" showname="Sequence number: 0 (relative sequence
number)" size="4" pos="46" show="0" value="81632190"/>
<field name="tcp.hdr_len" showname="Header length: 4 bytes (bogus, must be
at least 20)" size="1" pos="54" show="4" value="17"/>
</proto>
----
The tcp.len is "TCP segment len" which is actually 12 bytes, it does not
include the tcp header length (4 bytes).
So I think this is not a defect.
--
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.