Wireshark-users: [Wireshark-users] Missing TCP Flags
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: "Scheffenegger, Richard" <rs@xxxxxxxxxx>
Date: Wed, 8 Sep 2010 14:37:58 +0100
Title: Missing TCP Flags

Hi,

I have here a trace with the RFC3540 ECN Nounce. That (valid) TCP Flag is one of the lower 4 bits where the TCP options length is also stored; however, Wireshare doesn't seem to decode the full 12-bit TCP Flags field properly - only the lower 8 bits are shown.

Does anyone know how to fix this, so that the full 12 bit field is decoded (3 reserved bits, ECN, CWR, ECE, URG, ACK, PSH, RST, SYN, FIN )?

Thanks,

Richard Scheffenegger