tcp - What does "raw packet data" field mean in Wireshark? -
as can see in first figure, raw packet data mean? difference between normal tcp packet in figure 2?
fyi, i'm using wireshark 2.2.0.
basically when capturing packets on interface have associated link type (ethernet, 802.11, 802.15.4, etc).
raw packet used when dont have any, first bytes captured directly ipv6 or ipv4 header.
raw ip; packet begins ipv4 or ipv6 header, "version" field of header indicating whether it's ipv4 or ipv6 header.


Comments
Post a Comment