Wireshark · Wireshark-users: [Wireshark-users] Missing TCP Flags

["Scheffenegger, Richard" <rs@xxxxxxxxxx>]

Title: Missing TCP Flags

Hi,

I have here a trace with the RFC3540 ECN Nounce. That (valid) TCP Flag is one of the lower 4 bits where the TCP options length is also stored; however, Wireshare doesn't seem to decode the full 12-bit TCP Flags field properly - only the lower 8 bits are shown.

Does anyone know how to fix this, so that the full 12 bit field is decoded (3 reserved bits, ECN, CWR, ECE, URG, ACK, PSH, RST, SYN, FIN )?

Thanks,

Richard Scheffenegger