Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 5235] tcp.len (TCP Segment Len) is smaller than should be

[bugzilla-daemon@xxxxxxxxxxxxx]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5235

Sam Liao <phyomh@xxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |phyomh@xxxxxxxxx

--- Comment #1 from Sam Liao <phyomh@xxxxxxxxx> 2010-09-26 08:15:20 PDT ---
  <proto name="tcp" showname="Transmission Control Protocol, Src Port: 44120
(44120), Dst Port: 48051 (48051), Seq: 0" size="16" pos="42">
    <field name="tcp.srcport" showname="Source port: 44120 (44120)" size="2"
pos="42" show="44120" value="ac58"/>
    <field name="tcp.dstport" showname="Destination port: 48051 (48051)"
size="2" pos="44" show="48051" value="bbb3"/>
    <field name="tcp.port" showname="Source or Destination Port: 44120"
hide="yes" size="2" pos="42" show="44120" value="ac58"/>
    <field name="tcp.port" showname="Source or Destination Port: 48051"
hide="yes" size="2" pos="44" show="48051" value="bbb3"/>
    <field name="tcp.stream" showname="Stream index: 0" size="0" pos="42"
show="0"/>
    <field name="tcp.len" showname="TCP Segment Len: 12" hide="yes" size="1"
pos="54" show="12" value="17"/>
    <field name="tcp.seq" showname="Sequence number: 0    (relative sequence
number)" size="4" pos="46" show="0" value="81632190"/>
    <field name="tcp.hdr_len" showname="Header length: 4 bytes (bogus, must be
at least 20)" size="1" pos="54" show="4" value="17"/>
  </proto>
----
The tcp.len is "TCP segment len" which is actually 12 bytes, it does not
include the tcp header length (4 bytes).

So I think this is not a defect.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.