How to tell if TCP segment contains a data in Wireshark?

asked 2017-11-26 02:21:38 +0000

yakinharoon
1 ●3 ●3 ●5

updated 2017-11-26 02:22:10 +0000

Does "TCP segment Len " value indicates that it contains data and size of data?

See screenshot: https://photos.app.goo.gl/Wm56k2X9cen...)

edit retag flag offensive close merge delete

add a comment

2 Answers

Sort by » oldest newest most voted

answered 2017-11-26 10:56:40 +0000

Jaap

13742 ●711 ●115

That's what it's supposed to do.

edit flag offensive delete link

add a comment

answered 2017-11-27 05:29:13 +0000

wolak
1 ●1 ●3 ●1

Yes, TCP Segment Length is a calculated field (based on IP total size and TCP header length). You can set a display filter to show only TCP packets that contain data like this

tcp.len > 0

edit flag offensive delete link

Comments

Thank you sir

yakinharoon ( 2017-12-17 04:39:49 +0000 )edit

add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2017-11-26 02:21:38 +0000

Seen: 5,889 times

Last updated: Nov 27 '17

How to tell if TCP segment contains a data in Wireshark? edit

2 Answers

Comments