Ask Your Question

Revision history [back]

PCAP Interpretation

Hello,

I have a PCAP file, when opened using Wireshark it shows (in info) column a particular packet is for "Attach Request" and the other one for "Attach Accept". I exported this file in Json and trying to visually figure out which element gives this information to wireshark. I was unable to find it. Hence, my question, on what basis Wireshark gives a very useful information about the packet in "info" column, Which section of packet provides this information?

I need to do this as I am reading PCAP in java and intend to interpret this information for validation. Can you help please?

Thanks Nitin