Re: Printing of TCP flags seems incorrect

[Guy Harris <guy () alum mit edu>]

On Jul 1, 2008, at 4:32 PM, grarpamp wrote:

> Hi. Surely it is not possible to have both 'no flags' and
> <any_other_flags> present at the same time? The man page has a few
> references to the dot, particularly in the 'OUTPUT FORMAT - TCP
> Packets' example near 'means no flags'.

The man page apparently needs to be updated, as, in the current code,  
"." means ACK, and "none" means "no flags":

        revision 1.127
	date: 2007-01-29 01:59:42 -0800;  author: hannes;  state: Exp;   
lines: +626 -63$
        change the TCP printer to print new-style order:
          - seperate fields by comma
          - use [] for flags and options sets
          - print a trailing length field

        make use of tok2str() and bitttok2str()
        move port definitions into tcp.h


-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.