This wiki has been migrated to https://gitlab.com/wireshark/wireshark/-/wikis/home and is now deprecated. Please use that site instead.
Differences between revisions 4 and 6 (spanning 2 versions)
Revision 4 as of 2004-10-07 21:03:58
Size: 2155
Editor: GuyHarris
Comment: "it's" -> "its" when it's the possessive of "it". Tweak protocol ID stuff.
Revision 6 as of 2004-10-25 03:45:36
Size: 3158
Editor: 221
Comment:
Deletions are marked like this. Additions are marked like this.
Line 16: Line 16:
 * ["IP"]: Typically, TCP uses ["IP"] as its underlying protocol. The registered protocol ID for TCP on IP is 6.  * ["IP"]: Typically, TCP uses ["IP"] as its underlying protocol. The assigned protocol number for TCP on IP is 6.
Line 57: Line 57:
[http://www.etoo.cn/21win-win 拓展训练]
[http://www.paite.net 尖锐湿疣]
[http://www.paite.net/1 尖锐湿疣]
[http://www.paite.net/default.asp 尖锐湿疣]
[http://www.paite.net/qyjj.html 尖锐湿疣]
[http://www.paite.net/cpjs.html 尖锐湿疣]
[http://www.paite.net/zjxx.html 尖锐湿疣]
[http://www.paite.net/gmzn.html 尖锐湿疣]
[http://www.paite.net/zsxx.html 尖锐湿疣]
[http://www.paite.net/yhfk.html 尖锐湿疣]
[http://www.wjmgy.com 脉管炎]
[http://www.wjmgy.com/1 脉管炎]
[http://www.wjmgy.com/hospitaljs.htm 脉管炎]
[http://www.wjmgy.com/zhuankejs.htm 脉管炎]
[http://www.wjmgy.com/zhuzhiys.htm 脉管炎]
[http://www.wjmgy.com/conact.htm 脉管炎]

Transmission Control Protocol (TCP)

The TCP protocol provides stream based connection oriented transfer of data of the InternetProtocolFamily.

It provides the described TCP port multiplexing and much more. It establishes a logical connection, which is reliable against the problems of PacketLoss, DuplicatePackets and such.

Sending a few bytes will transfer them to the remote host, without giving any additional faulty or missing bytes to the receiving application.

History

XXX - add a brief description of TCP history

Protocol dependencies

  • ["IP"]: Typically, TCP uses ["IP"] as its underlying protocol. The assigned protocol number for TCP on IP is 6.

Example traffic

XXX - Add example traffic here (as plain text or Ethereal screenshot).

Ethereal

TCP dissector is fully functional.

You can select a TCP stream very fast by using the Follow TCP stream feature. First select a TCP packet in the packet list pane and then click the menu item Analyze/Follow TCP Stream

There are two statistical menu items for TCP available: Statistics/Endpoints which contains a tab showing all TCP endpoints (combination of IP address and TCP port) and Statistics/Conversations, which contains a tab showing all TCP conversations (combination of two endpoints).

Preference Settings

(XXX add links to preference settings affecting how TCP is dissected).

Example capture file

XXX - Add a simple example capture file. Keep it short, it's also a good idea to gzip it to make it even smaller, as Ethereal can open gzipped files automatically.

Display Filter

A complete list of TCP display filter fields can be found in the [http://www.ethereal.com/docs/dfref/t/tcp.html display filter reference]

  • Show only the TCP based traffic:

     tcp 

    Show only the traffic to and from TCP port 80 (usually ["HTTP"]):

     tcp.port == 80 

Capture Filter

  • Capture only the TCP based traffic:

     tcp 

Discussion

[http://www.etoo.cn/21win-win 拓展训练] [http://www.paite.net 尖锐湿疣] [http://www.paite.net/1 尖锐湿疣] [http://www.paite.net/default.asp 尖锐湿疣] [http://www.paite.net/qyjj.html 尖锐湿疣] [http://www.paite.net/cpjs.html 尖锐湿疣] [http://www.paite.net/zjxx.html 尖锐湿疣] [http://www.paite.net/gmzn.html 尖锐湿疣] [http://www.paite.net/zsxx.html 尖锐湿疣] [http://www.paite.net/yhfk.html 尖锐湿疣] [http://www.wjmgy.com 脉管炎] [http://www.wjmgy.com/1 脉管炎] [http://www.wjmgy.com/hospitaljs.htm 脉管炎] [http://www.wjmgy.com/zhuankejs.htm 脉管炎] [http://www.wjmgy.com/zhuzhiys.htm 脉管炎] [http://www.wjmgy.com/conact.htm 脉管炎]

Transmission_Control_Protocol (last edited 2020-07-23 02:19:27 by ChuckCraft)