That was a nice bit of source code archeology, but I’ve found that this format was changed in commit 7f6d5c04a86 with the comment:
commit 7f6d5c04a869525d31e8d6e260d5195857481031 Author: Martin Mathieson <martin.r.mathie...@googlemail.com> Date: Wed Aug 29 15:35:27 2007 +0000 Don't show fragment offset as a bit field, but note number of bits used in long text. svn path=/trunk/; revision=22727 Note the date, that was back in 2007, so this format disappeared before Wireshark 1.0. Where did you get this from? Thanks, Jaap > On 19 Jun 2020, at 09:48, damker <dam...@sina.com> wrote: > > an IP packet decode As follows: > ... > Flags: 0x006b > 0... .... .... .... = Reserved bit: Not set > .0.. .... .... .... = Don't fragment: Not set > ..0. .... .... .... = More fragments: Not set > ...0 0011 0101 1000 = Fragment offset: 856 > Time to live: 128 > > I know that it says "The fragment offset is measured in units of 8 octets (64 > bits)" in RFC 791. > my question is: Flags = 0x006b, the "...0 0011 0101 1000 = Fragment offset: > 856" should be "...0 0000 0110 1011 = Fragment offset: 856"? > I think the second one is more clear. > > > > damker > > ___________________________________________________________________________ > Sent via: Wireshark-users mailing list <wireshark-users@wireshark.org > <mailto:wireshark-users@wireshark.org>> > Archives: https://www.wireshark.org/lists/wireshark-users > <https://www.wireshark.org/lists/wireshark-users> > Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-users > <https://www.wireshark.org/mailman/options/wireshark-users> > mailto:wireshark-users-requ...@wireshark.org?subject=unsubscribe > <mailto:wireshark-users-requ...@wireshark.org?subject=unsubscribe>
___________________________________________________________________________ Sent via: Wireshark-users mailing list <wireshark-users@wireshark.org> Archives: https://www.wireshark.org/lists/wireshark-users Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-users mailto:wireshark-users-requ...@wireshark.org?subject=unsubscribe