THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
Ask Your Question

Revision history  [back]

Revision 2
Chuckc's avatar
3k
Chuckc
updated 2021-10-27 15:31:46 +0000

The behavior of the ICMP Identifier field was improved with 17045 - icmp.ident - separate combined column for be/le.

The BE means Big Endian. The merge request above allows the Ident field to be displayed as Big Endian or Little Endian. To kick the tires on this, download Development Release (3.6.0rc1).

rfc792 INTERNET CONTROL MESSAGE PROTOCOL (pg.14) describes the Identifier and Sequence Number fields. ("... may be used ...") How they are used is very loosey goosey and varies based on how ICMP was implemented in the device stack.

Revision 1
Chuckc's avatar
3k
Chuckc
answered 2021-10-27 15:29:35 +0000

The behavior of the ICMP Identifier field was improved with 17045 - icmp.ident - separate combined column for be/le.

The BE means Big Endian. The merge request above allows the Ident field to be displayed as Big Endian or Little Endian. To kick the tires on this, download Development Release (3.6.0rc1).

rfc792 INTERNET CONTROL MESSAGE PROTOCOL (pg.14) describes the Identifier and Sequence Number fields. ("... may be used ...") How they are used is very loosey goosey and varies based on how ICMP was implemented in the device stack.