Flag Control
 Lincoln Welder SA-200 L-5171 Texas Flag Control Plate US $69.99 
|
 Lincoln Welder SA-200-M-6549 Texas Flag Control Plate US $49.99
|
| Powered by phpBay Pro |
When analyzing a packet in wireshark, what does the "Flag" field mean?
For example:
Frame Control:
Version: 0
Type: Data frame (2)
Subtype: 0
Flags 0x42
I'm most interested in the Flags field and what that hex number represents.
I think it specifies the protocol in this case I believe it to be a flag for Spanning Tree Protocol. Which is a protocol used to prevent switching loops in a network that uses multiple switches that form reduntant links.
Which makes sense because STP is a layer 2 protocol.
When I search for 'protocol designated by 0x42'. I get results which seem to point to a BDPU which is essentially a 'keep alive' for STP links.
After much searching I came to the conclusion that Flags 0x42 is a hex(obviously from the 0x part) portion that specifies protocol. See http://www.wireshark.org/lists/wireshark-dev/200808/msg00252.html.
From that I searched the above in google and came to my conclusion.
That is my professional opinion.
Let me know what you find out.. I'm curious...
--Rick
http://www.rickandandrea.com/rick/
Recently Purchased:
| Powered by phpBay Pro |