Transmission Control Protocol (tcp)

Table 298. Transmission Control Protocol (tcp)

FieldField NameTypeDescription
tcp.ackAcknowledgement numberUnsigned 32-bit integer 
tcp.analysis.ack_rttThe RTT to ACK the segment wasTime durationHow long time it took to ACK the segment (RTT)
tcp.analysis.acks_frameThis is an ACK to the segment in frameUnsigned 32-bit integerWhich previous segment is this an ACK for
tcp.analysis.flagsTCP Analysis FlagsNo valueThis frame has some of the TCP analysis flags set
tcp.checksumChecksumUnsigned 16-bit integer 
tcp.checksum_badBad ChecksumBoolean 
tcp.dstportDestination PortUnsigned 16-bit integer 
tcp.flagsFlagsUnsigned 8-bit integer 
tcp.flags.ackAcknowledgmentBoolean 
tcp.flags.cwrCongestion Window Reduced (CWR)Boolean 
tcp.flags.ecnECN-EchoBoolean 
tcp.flags.finFinBoolean 
tcp.flags.pushPushBoolean 
tcp.flags.resetResetBoolean 
tcp.flags.synSynBoolean 
tcp.flags.urgUrgentBoolean 
tcp.hdr_lenHeader LengthUnsigned 8-bit integer 
tcp.lenTCP Segment LenUnsigned 32-bit integer 
tcp.nxtseqNext sequence numberUnsigned 32-bit integer 
tcp.portSource or Destination PortUnsigned 16-bit integer 
tcp.seqSequence numberUnsigned 32-bit integer 
tcp.srcportSource PortUnsigned 16-bit integer 
tcp.urgent_pointerUrgent pointerUnsigned 16-bit integer 
tcp.window_sizeWindow sizeUnsigned 16-bit integer