This is our old Q&A Site. Please post any new questions and answers at

What is the mean of search > agent > 33689 [ACK} seq=4 ...................... ?

asked 27 Mar '12, 18:57

djedje's gravatar image

accept rate: 0%

I guess you wonder about "search-agent" being shown in the packet list. It is the service name that was officially registered for port 1234, and Wireshark will replace that port number by default with the name. There's a file called "services" in the Wireshark program directory where it is looked up from.

If you prefer seeing the real port numbers in the packet list you can disable the Transport layer name resolution in the View -> Name Resolution menu (temporarily), or in the preferences (survives a restart of Wireshark).

permanent link

answered 28 Mar '12, 03:17

Jasper's gravatar image

Jasper ♦♦
accept rate: 18%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here



Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text]( "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:


question asked: 27 Mar '12, 18:57

question was seen: 2,101 times

last updated: 28 Mar '12, 03:17

p​o​w​e​r​e​d by O​S​Q​A