Ask Your Question
0

How to tell if TCP segment contains a data in Wireshark?

asked 2017-11-26 02:21:38 +0000

yakinharoon gravatar image

updated 2017-11-26 02:22:10 +0000

Does "TCP segment Len " value indicates that it contains data and size of data?

See screenshot: https://photos.app.goo.gl/Wm56k2X9cen...)

edit retag flag offensive close merge delete

2 Answers

Sort by ยป oldest newest most voted
2

answered 2017-11-26 10:56:40 +0000

Jaap gravatar image

That's what it's supposed to do.

edit flag offensive delete link more
0

answered 2017-11-27 05:29:13 +0000

wolak gravatar image

Yes, TCP Segment Length is a calculated field (based on IP total size and TCP header length). You can set a display filter to show only TCP packets that contain data like this

tcp.len > 0
edit flag offensive delete link more

Comments

Thank you sir

yakinharoon gravatar imageyakinharoon ( 2017-12-17 04:39:49 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2017-11-26 02:21:38 +0000

Seen: 76 times

Last updated: Nov 27