That was a nice bit of source code archeology, but I’ve found that this format 
was changed in commit 7f6d5c04a86 with the comment:

commit 7f6d5c04a869525d31e8d6e260d5195857481031
Author: Martin Mathieson <martin.r.mathie...@googlemail.com>
Date:   Wed Aug 29 15:35:27 2007 +0000

    Don't show fragment offset as a bit field, but note number of bits used in 
long text.
    
    svn path=/trunk/; revision=22727

Note the date, that was back in 2007, so this format disappeared before 
Wireshark 1.0.
Where did you get this from?

Thanks,
Jaap


> On 19 Jun 2020, at 09:48, damker <dam...@sina.com> wrote:
> 
> an IP packet decode As follows:
>     ...
>     Flags: 0x006b
>         0... .... .... .... = Reserved bit: Not set
>         .0.. .... .... .... = Don't fragment: Not set
>         ..0. .... .... .... = More fragments: Not set
>     ...0 0011 0101 1000 = Fragment offset: 856
>     Time to live: 128
> 
> I know that it says "The fragment offset is measured in units of 8 octets (64 
> bits)" in RFC 791.
> my question is: Flags = 0x006b, the "...0 0011 0101 1000 = Fragment offset: 
> 856" should be "...0 0000 0110 1011 = Fragment offset: 856"?
> I think the second one is more clear.
> 
> 
> 
> damker
>  
> ___________________________________________________________________________
> Sent via:    Wireshark-users mailing list <wireshark-users@wireshark.org 
> <mailto:wireshark-users@wireshark.org>>
> Archives:    https://www.wireshark.org/lists/wireshark-users 
> <https://www.wireshark.org/lists/wireshark-users>
> Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-users 
> <https://www.wireshark.org/mailman/options/wireshark-users>
>             mailto:wireshark-users-requ...@wireshark.org?subject=unsubscribe 
> <mailto:wireshark-users-requ...@wireshark.org?subject=unsubscribe>
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@wireshark.org>
Archives:    https://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-requ...@wireshark.org?subject=unsubscribe

Reply via email to