icmp ttl and total_length are displayed with commas

icmp

ttl

retag add tags

Hello, I did a capture on my local lan and I see something very weird.

the ttl and total length field on icmp packets that are unreachable adds decimals.

the cap is very big, 300,000 files, but the a screen capture is here: https://i.imgur.com/lzfr5tV.png

it drives me crazy, any ideas?

(using wireshark 2.6.5)

george

All the packets you've shown are ICMPs which have two IP headers - own ICMP's IP header and original packet IP header. So TTL values correspond to both IP headers. Try to expand all packet details under ICMP subtree and you'll spot the source of the second TTL value.

1.1k

Packet_vlad

answered 2019-02-13 18:59:49 +0000, updated 2019-02-13 19:03:46 +0000

edit flag offensive 0 remove flag delete link

Comments

ok thanks, i got that, but can I have as column only one the two?

geo555 (2019-02-13 19:14:18 +0000) edit

yes, you can. Right-click on a column header, select Edit Column and change Occurrence value where 0 means "display all such field values", 1 means "display only first field value" etc.

Packet_vlad (2019-02-13 19:23:43 +0000) edit

ok, thanks, it worked!

geo555 (2019-02-13 19:35:40 +0000) edit

add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

icmp ttl and total_length are displayed with commas edit

Comments

1 Answer

Comments