[Zeek] Absolute ack and seq number of tcp packet

Hui Lin (Hugo) hlin33 at illinois.edu
Thu Nov 28 11:36:15 PST 2019


Hi

In the tcp_packet event, how can I obtain the *absolute values* (found in
the tcp header), not the relative values of ack and seq numbers.

Best regards,

Hui Lin
-- 
Hui Lin
Ph.D. Candidate (http://hlin33.web.engr.illinois.edu/)
DEPEND (http://depend.csl.illinois.edu/)
ECE, Uni. of Illinois at Urbana-Champaign
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/zeek/attachments/20191128/6bd7d9d7/attachment.html 


More information about the Zeek mailing list