This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Differentiated Services Field?

0

Does anyone know what this is using port 1433 for?

Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) Total Length: 732 Identification: 0x0599 (1433)

asked 26 Jun '12, 13:06

Wshark6's gravatar image

Wshark6
1223
accept rate: 0%


One Answer:

2

The Identification field is simply a unique ID applied to each packet a host sends on a particular connection. It is generally only useful if a packet needs to fragmented (say by a router) - each fragment will retain the original Identification. It allows the receiving host to know how to reassemble the fragments.

It doesn't have anything to do with DiffServ (it appears after it), and doesn't tell you anything about the port or protocol that the packet is associated with.

answered 27 Jun '12, 03:44

martyvis's gravatar image

martyvis
8911525
accept rate: 7%