Re: TCP sequence number

[Ian Schorr <ian.schorr () gmail com>]

Rayne, this is a feature called "Relative sequence numbers", intended to
make reading and comparing TCP sequence numbers a little easier.  To turn
this feature off, uncheck Preferences->Protocols->TCP->Relative sequence
numbers and window scaling.

In many cases (most of the time for me), you don't really care what the REAL
sequence number is.  You just need to know how how the value of the sequence
number in one packet relates to another.

On Wed, Dec 23, 2009 at 1:29 PM, Rayne <hjazz6 () ymail com> wrote:

> I would like to know how Wireshark reads the sequence number. I have a
> packet with the Sequence number displayed as 3273, but the corresponding
> bytes are "2e b2 cf 43". How did Wireshark get 3273 from 2e b2 cf 43?
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe