Wireshark-bugs: [Wireshark-bugs] [Bug 9749] Fields TCP.len and UDP.length behave different in te

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Thu, 13 Feb 2014 19:28:40 +0000

Comment # 2 on bug 9749 from 
Hi Alexis:

Thanks for your response. I wanted to add this if it is relevant.

You said that in TCP(taken from the RFC): "The TCP Length is the TCP header
length plus the data length in octets"....but if you try in your wireshark, the
'tcp.len' field DOES NOT count TCP headers...only the payload...so in that
sense I think is wrong.

(tcp.length does not exist; tcp.len exists)

So don't you think there is a different behavior between UDP and TCP, and even
the TCP RFC says that it should count TCP header but tcp.len does not count the
header for TCP?

I also tried putting 'udp.length - 8', but of course, the 'minus 8' part will
not be accepted.

If you still think that this is right, well i guess that maybe a enhancement
can be filed so we can have UDP PAYLOAD only counter.

Thanks a lot!

You are receiving this mail because:
  • You are watching all bug changes.