Ethereal-dev: Re: [Ethereal-dev] Having an invisible field on the TCP header giving number of

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <gharris@xxxxxxxxx>
Date: Sat, 20 Apr 2002 02:16:01 -0700
On Sat, Apr 20, 2002 at 06:35:07AM +0930, Richard Sharpe wrote:
> When trying to analyse a trace recently, I wanted to mark no-data ACKs 
> differently so I could ignore them or see the patters, and I found myself 
> doing something like ip.len==40, which is not nice.
> 
> So, does anyone have any objections,

I don't - it sounds reasonable and useful.

> or suggestions about what the field should be?

It should be the TCP payload length in the segment; I'd call it
"tcp.len".