Ask Your Question

Revision history [back]

ip.flags.sf not supported?

I'm running wireshark 2.4.6. I see that 'ip.flags.sf' is listed as supported in the docs, but when I actually try to use this display filter it doesn't give expected results:

'ip.flags.sf' is accepted, but doesn't match any ipv4 packets 'ip.flags.sf==0' also is accepted but doesn't match anything

Drilling down in an ipv4 packet, I see flags expanded into the bits for reserved, DF, and MF: no mention of the security flag. I've done a bit of online searching, and haven't been able to find any references to the 'security' flag outside of this 15-year-old rfc:

So does anyone know the status of this flag and the corresponding display filter identifier?