Re: ICMP Echo Requests & Replies - multiple Identifier & Sequence numbers

[Guy Harris <guy () alum mit edu>]

On Feb 24, 2011, at 3:30 AM, Keith French wrote:

> I have recently seen in Wireshark when looking at an echo request/reply pair, that instead of the 
> identification/sequence numbers used to tie the two packets together, there are now two identifiers and two sequence 
> numbers:-

...or, as others have indicated, one identifier, presented two ways, and one sequence number, presented two ways.

> & how do you use them to tie up the request & reply?

Look either for matching little-endian values or matching big-endian values.

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe