基于wireshark的Frame报文详解

基于wireshark的Frame报文详解

Frame 2: 624 bytes on wire (4992 bits), 624 bytes captured (4992 bits)   2号帧，线路624字节，实际捕获4992字节，一字节换算为8bite
Encapsulation type: Ethernet (1)
Arrival Time: Feb 22, 2020 10:32:37.375731000    捕获日期和时间
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1456108357.375731000 seconds      1456108357绝对时间秒数
[Time delta from previous captured frame: 0.007579000 seconds]    此包与前一包时间间隔
[Time delta from previous displayed frame: 0.007579000 seconds]
[Time since reference or first frame: 28.661794000 seconds]    此包与第一个帧的时间间隔
Frame Number: 2   帧序号
Frame Length: 624 bytes (536 bits)    帧长度
Capture Length: 624 bytes (536 bits)    捕获帧长度
[Frame is marked: False]     此帧是否做了标记：否
[Frame is ignored: False]
[Protocols in frame: eth:ethertype:ip:tcp:ftp]   帧内封装的协议层次结构
[Coloring Rule Name: TCP]   用不同颜色的染色标记的协议名称：TCP
[Coloring Rule String: tcp]    染色显示规则字符串