"it's" -> "its" when it's the possessive of "it". Tweak protocol ID stuff.
|Deletions are marked like this.||Additions are marked like this.|
|Line 16:||Line 16:|
|* ["IP"]: Typically, TCP uses ["IP"] as its underlying protocol. The registered protocol ID for TCP on IP is 6.||* ["IP"]: Typically, TCP uses ["IP"] as its underlying protocol. The assigned protocol number for TCP on IP is 6.|
Transmission Control Protocol (TCP)
The TCP protocol provides stream based connection oriented transfer of data of the InternetProtocolFamily.
Sending a few bytes will transfer them to the remote host, without giving any additional faulty or missing bytes to the receiving application.
XXX - add a brief description of TCP history
- ["IP"]: Typically, TCP uses ["IP"] as its underlying protocol. The assigned protocol number for TCP on IP is 6.
XXX - Add example traffic here (as plain text or Ethereal screenshot).
TCP dissector is fully functional.
You can select a TCP stream very fast by using the Follow TCP stream feature. First select a TCP packet in the packet list pane and then click the menu item Analyze/Follow TCP Stream
There are two statistical menu items for TCP available: Statistics/Endpoints which contains a tab showing all TCP endpoints (combination of IP address and TCP port) and Statistics/Conversations, which contains a tab showing all TCP conversations (combination of two endpoints).
(XXX add links to preference settings affecting how TCP is dissected).
Example capture file
XXX - Add a simple example capture file. Keep it short, it's also a good idea to gzip it to make it even smaller, as Ethereal can open gzipped files automatically.
A complete list of TCP display filter fields can be found in the [http://www.ethereal.com/docs/dfref/t/tcp.html display filter reference]
Show only the TCP based traffic:
Show only the traffic to and from TCP port 80 (usually ["HTTP"]):
tcp.port == 80
Capture only the TCP based traffic:
[http://www.ietf.org/rfc/rfc793.txt RFC793] TRANSMISSION CONTROL PROTOCOL