Wireshark mailing list archives

Re: the Fragment offset field in IP packet should follow the Raw bitstream?


From: Jaap Keuter <jaap.keuter () xs4all nl>
Date: Fri, 19 Jun 2020 17:10:07 +0200

That was a nice bit of source code archeology, but I’ve found that this format was changed in commit 7f6d5c04a86 with 
the comment:

commit 7f6d5c04a869525d31e8d6e260d5195857481031
Author: Martin Mathieson <martin.r.mathieson () googlemail com>
Date:   Wed Aug 29 15:35:27 2007 +0000

    Don't show fragment offset as a bit field, but note number of bits used in long text.
    
    svn path=/trunk/; revision=22727

Note the date, that was back in 2007, so this format disappeared before Wireshark 1.0.
Where did you get this from?

Thanks,
Jaap


On 19 Jun 2020, at 09:48, damker <damker () sina com> wrote:

an IP packet decode As follows:
    ...
    Flags: 0x006b
        0... .... .... .... = Reserved bit: Not set
        .0.. .... .... .... = Don't fragment: Not set
        ..0. .... .... .... = More fragments: Not set
    ...0 0011 0101 1000 = Fragment offset: 856
    Time to live: 128

I know that it says "The fragment offset is measured in units of 8 octets (64 bits)" in RFC 791.
my question is: Flags = 0x006b, the "...0 0011 0101 1000 = Fragment offset: 856" should be "...0 0000 0110 1011 = 
Fragment offset: 856"?
I think the second one is more clear.



damker
 
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org <mailto:wireshark-users () wireshark org>>
Archives:    https://www.wireshark.org/lists/wireshark-users <https://www.wireshark.org/lists/wireshark-users>
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-users 
<https://www.wireshark.org/mailman/options/wireshark-users>
            mailto:wireshark-users-request () wireshark org?subject=unsubscribe <mailto:wireshark-users-request () 
wireshark org?subject=unsubscribe>
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    https://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe

Current thread: