Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 9749] Fields TCP.len and UDP.length behave different in terms of Header length

[bugzilla-daemon@xxxxxxxxxxxxx]

Comment # 2 on bug 9749 from Antonio

Hi Alexis:

Thanks for your response. I wanted to add this if it is relevant.

You said that in TCP(taken from the RFC): "The TCP Length is the TCP header
length plus the data length in octets"....but if you try in your wireshark, the
'tcp.len' field DOES NOT count TCP headers...only the payload...so in that
sense I think is wrong.

(tcp.length does not exist; tcp.len exists)

So don't you think there is a different behavior between UDP and TCP, and even
the TCP RFC says that it should count TCP header but tcp.len does not count the
header for TCP?

I also tried putting 'udp.length - 8', but of course, the 'minus 8' part will
not be accepted.

If you still think that this is right, well i guess that maybe a enhancement
can be filed so we can have UDP PAYLOAD only counter.

Thanks a lot!

---

      You are receiving this mail because:

• You are watching all bug changes.