TCP Data Fields and Properties
Fields:
TCP.Port - Filters on the Source or Destination port. Used to find traffic based on port which is often associated with an application.
TCP.Port==80 // filters on the default port for HTTP traffic.
TCP.Flags.Reset - Can be used to test and see if the reset flag is set.
TCP.Window - Window Size of the current TCP frame, but ignoring the scale factor. See Property.TCPWindowSize below.
Properties:
Property.TCPRetransmit - A property that is set when a TCP retransmit is found. Retransmits are often an indication of a network infrastructure problem and network congestion.
Property.TCPRetransmit == 1 // Finds all frames that have been retransmitted.
Property.TCPPayloadLength - Represents the TCP Payload Size.
Property.TCPCheckSumStatus - This is a string that represents if the checksum is valid or not. This could be "Good" or "Bad".
Property.TCPDescription - A property to show the TCP Description for the current frame as opposed to the top most protocol description.
Property.TCPAckNumber - The current frame Acknoledgement Number
Property.TCPSeqNumber - The current frames Sequence Number
Property.TCPSeqeunceRange - The TCP Sequence range which is the current seq number to the current seq plus the length of the tcp payload.
Property.TCPShortAckNumber - A WORD representation of the Ack number to make it easy to compare and remember.
Property.TCPShortSeqNumber - A WORD representation of the Seq number to make it easy to compare and remember.
Property.TCPWindowSize - The Window Size for the current frame including the scaling factor if the 3 way handshake is availalbe.