tcp - What does "raw packet data" field mean in Wireshark? -


figure 1

enter image description here

as can see in first figure, raw packet data mean? difference between normal tcp packet in figure 2?

fyi, i'm using wireshark 2.2.0.

basically when capturing packets on interface have associated link type (ethernet, 802.11, 802.15.4, etc).

raw packet used when dont have any, first bytes captured directly ipv6 or ipv4 header.

raw ip; packet begins ipv4 or ipv6 header, "version" field of header indicating whether it's ipv4 or ipv6 header.

from http://www.tcpdump.org/linktypes.html


Comments

Popular posts from this blog

php - Auto increment employee ID -

php - isset function not working properly -

firebird - Error "invalid transaction handle (expecting explicit transaction start)" executing script from Delphi -