Wireshark-dev: Re: [Wireshark-dev] Some fields output nothing, when using tshark with -T fields

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Sake Blok <sake@xxxxxxxxxx>
Date: Thu, 17 Jan 2008 20:14:24 +0100
On Thu, Jan 17, 2008 at 08:05:17PM +0100, Sake Blok wrote:
> On Thu, Jan 17, 2008 at 04:19:52PM +0100, Nils wrote:
> 
> In case of the field "tcp.analysis.retransmission" I think there
> is room for improvement. Even when this field is in the packet,

"Even when this field is in the packet" should of course have been
"Even when this field is set while dissecting the packet" since
this information is not *in* the packet, but is added by (wire|t)shark
while it follows the tcp-stream.

Cheers,


Sake