Ask Your Question

How to tell if TCP segment contains a data in Wireshark?

asked 2017-11-26 02:21:38 +0000

yakinharoon gravatar image

updated 2017-11-26 02:22:10 +0000

Does "TCP segment Len " value indicates that it contains data and size of data?

See screenshot:

edit retag flag offensive close merge delete

2 Answers

Sort by ยป oldest newest most voted

answered 2017-11-27 05:29:13 +0000

wolak gravatar image

Yes, TCP Segment Length is a calculated field (based on IP total size and TCP header length). You can set a display filter to show only TCP packets that contain data like this

tcp.len > 0
edit flag offensive delete link more


Thank you sir

yakinharoon gravatar imageyakinharoon ( 2017-12-17 04:39:49 +0000 )edit

answered 2017-11-26 10:56:40 +0000

Jaap gravatar image

That's what it's supposed to do.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower


Asked: 2017-11-26 02:21:38 +0000

Seen: 5,689 times

Last updated: Nov 27 '17