First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
0

Second bit set to false

I'm trying to determine if the second bit in a captured packet is set to false in a wireshark packet capture. How do I determine if a bit in a packet is set to true or false and what does that mean? Edit: trying to determine what the raw information of binary code actually means and where a second bit starts in a line.

Ferrybear23's avatar
1
Ferrybear23
asked 2021-10-18 17:42:45 +0000, updated 2021-10-19 15:15:20 +0000
edit flag offensive 0 remove flag close merge delete

Comments

Whereabouts in the packet, do you mean in a specific protocol field?

grahamb's avatar grahamb (2021-10-18 20:10:48 +0000) edit

Or do you mean "the second bit in the raw packet data"?

Guy Harris's avatar Guy Harris (2021-10-18 22:41:08 +0000) edit

In the raw packet data. But I'm in general confused as to what a bit set true or false even looks like.

Ferrybear23's avatar Ferrybear23 (2021-10-19 02:09:53 +0000) edit

A bit can only have 2 states. 1 (aka: true) or 0 (aka: false) You could filter on it. Maybe you are even looking for: "eth.dst.lg == 0" But we coudl sure use some context here as the question is rather odd without a context.

hugo.vanderkooij's avatar hugo.vanderkooij (2021-10-19 14:29:02 +0000) edit

Thanks for your answer. The context is it's a question I saw on a test I took and did not understand what it was looking for and I am generally unsatisfied with just having to guess and not knowing which was true or false.

Ferrybear23's avatar Ferrybear23 (2021-10-19 15:16:55 +0000) edit
add a comment see more comments

1 Answer

0
hugo.vanderkooij's avatar
76
hugo.vanderkooij
answered 2021-10-19 14:30:16 +0000
edit flag offensive 0 remove flag delete link

Comments

add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer