tcp.pro |
|
 |
tcp |
RFC 793 + RFC 1700 (Assigned Numbers) |
 |
field -src |
 |
 |
sparelist |
7 |
 |
source port |
 |
field -dest |
 |
 |
samelist |
7 |
 |
destination port |
 |
field -sequence |
 |
 |
integer |
|
 |
sequence number (if SYN is present, it is the initial sequence number) |
 |
field -acknowledge |
 |
 |
integer |
|
 |
acknowledge number |
 |
field -dataoffset |
 |
 |
integer |
5 |
 |
number of DWORD in the header, so offset to the data |
 |
field -reserved |
 |
 |
integer |
0 |
 |
reserved for future use. Must be zero |
 |
field -flags |
 |
 |
flags |
0 |
 |
flags (fragmentation) |
 |
field -window |
 |
 |
integer |
0 |
 |
number of data octets the sender of this segment is willing to accept |
 |
field -checksum |
 |
 |
checksum |
|
 |
the checksum (0 means no checksum generated), for header and data |
 |
field -urgent |
 |
 |
integer |
|
 |
current value of the urgent pointer as a positive offset from the sequence number in this segment (if URG flag set) |
 |
fieldvariablearray -options |
 |
 |
mapper(tcp_option) |
|
 |
options |
 |
 |
 |
tcp_option |
RFC 793 + RFC 1072,1146,1323,1644,2385 |
 |
field -type |
 |
 |
sparelist |
0 |
 |
the option itself |
 |
field -data |
 |
 |
switch |
|
 |
specific data depending on the type |
 |
 |
 |
internal tcp_nodecode |
|
 |
field -length |
 |
 |
integer |
0 |
 |
length of the option |
 |
field -data |
 |
 |
blob |
|
 |
the option data |
 |
 |
 |
internal tcp_mss |
RFC 793 |
 |
field -length |
 |
 |
integer |
4 |
 |
length of the option |
 |
field -mss |
 |
 |
integer |
|
 |
maximum segment size |
 |
 |
 |
internal tcp_winscale |
RFC 1323 |
 |
field -length |
 |
 |
integer |
3 |
 |
length of the option |
 |
field -shiftcount |
 |
 |
integer |
|
 |
number of bits by which the receiver right-shifts the true receive-window value, to scale it into a 16-bit value to be sent in TCP header |
 |
 |
 |
internal tcp_sackoptions |
RFC 1072 |
 |
field -length |
 |
 |
integer |
0 |
 |
length of the option |
 |
fieldarray -data |
 |
 |
record |
|
 |
first sequence number of this block relative to ACK in TCP + size in octets of this block of contiguous data |
 |
 |
 |
internal tcp_echo |
RFC 1072 |
 |
field -length |
 |
 |
integer |
6 |
 |
length of the option |
 |
field -data |
 |
 |
integer |
|
 |
user defined echo info |
 |
 |
 |
internal tcp_timestamp |
RFC 1323 |
 |
field -length |
 |
 |
integer |
10 |
 |
length of the option |
 |
field -tsval |
 |
 |
integer |
|
 |
current value of the timestamp clock of the TCP sending the option |
 |
field -tsecr |
 |
 |
integer |
|
 |
timestamp value that was sent by the remote TCP in the TSval field |
 |
 |
 |
internal tcp_cc |
RFC 1644 |
 |
field -length |
 |
 |
integer |
3 |
 |
length of the option |
 |
field -seg_cc |
 |
 |
integer |
|
 |
segment connection count |
 |
 |
 |
internal tcp_posp |
RFC 1693 |
 |
field -length |
 |
 |
integer |
3 |
 |
length of the option |
 |
field -start |
 |
 |
integer |
|
 |
start flag |
 |
field -end |
 |
 |
integer |
|
 |
end flag |
 |
field -filler |
 |
 |
integer |
|
 |
filler |
 |
 |
 |
internal tcp_altchecksum |
RFC 1146 |
 |
field -length |
 |
 |
integer |
3 |
 |
length of the option |
 |
field -method |
 |
 |
sparelist |
|
 |
checksum method to use |
 |
 |