數據包概況

Frame:物理層的數據幀概況;
EthernetⅡ:數據鏈路層以太網幀頭部信息;
Internet Protocol Version 4：互聯網層IP包頭部;
Transmission Control Protocol:傳輸層的數據段頭部信息
Hypertext Transfer Protocol:應用層的信息，這裏的是HTTP;

物理層的數據幀概況

Frame 29: 213 bytes on wire (1704 bits), 213 bytes captured (1704 bits) on interface 0
#29號幀，線路213個字節，實際捕獲213個字節#

Interface id: 0 (\Device\NPF_{2214FA8C-274A-4657-B257-F1BB47FFAB8D})
#接口ID#
Encapsulation type: Ethernet (1)
#封裝類型#
Arrival Time: Jan 17, 2017 15:16:14.822720000 中國標準時間
#捕獲的日期和時間#
[Time shift for this packet: 0.000000000 seconds]
#此數據包的時間偏移#
Epoch Time: 1484637374.822720000 seconds
#周期時長#
[Time delta from previous captured frame: 0.001654000 seconds]

#此數據包與前一個數據包的捕獲時間間隔#
[Time delta from previous displayed frame: 0.001654000 seconds]
#此數據包與前一個數據包的顯示時間間隔#
[Time since reference or first frame: 2.089471000 seconds]
#此數據包與第一個數據包的時間間隔#
Frame Number: 29
#幀序號#
Frame Length: 213 bytes (1704 bits)
#幀長度#
Capture Length: 213 bytes (1704 bits)
#捕獲長度#
[Frame is marked: False]
#此幀是否被標記#

[Frame is ignored: False]
#此幀是否被忽略#
[Protocols in frame: eth:ethertype:ip:tcp:http]
#幀內封裝的協議層次結構#
[Coloring Rule Name: HTTP]
#著色標記的協議名稱#
[Coloring Rule String: http || tcp.port == 80 || http2]
#著色規則顯示的字符串#

數據鏈路層的數據概況

Ethernet II, Src: Tp-LinkT_80:37:36 (ec:26:ca:80:37:36), Dst: 58:00:e3:47:ad:e1 (58:00:e3:47:ad:e1)
#以太網幀,源地址:ec:26:ca:80:37:36,目的地址:58:00:e3:47:ad:e1#
Destination: 58:00:e3:47:ad:e1 (58:00:e3:47:ad:e1) #目標Mac地址#
Source: Tp-LinkT_80:37:36 (ec:26:ca:80:37:36) #源Mac地址#
Type: IPv4 (0x0800) #類型#

網絡層的數據概況

Internet Protocol Version 4, Src: 101.226.89.30, Dst: 192.168.1.104
Version: 4 #互聯網協議IPv4#
Header Length: 20 bytes #IP包頭部長度#
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) #差分服務字段#
Total Length: 199 #IP包的總長度#
Identification: 0x76ae (30382) #標誌字段
Flags: 0x02 (Don‘t Fragment) #標記字段#
Fragment offset: 0 #分的偏移量#
Time to live: 50 #生存期TTL#
Protocol: TCP (6) #此包內封裝的上層協議為TCP#
Header checksum: 0x5072 [validation disabled] #頭部的數據校驗和#
Source: 101.226.89.30 #源IP地址#
Destination: 192.168.1.104 #目的IP地址#
Source GeoIP: Unknown #源地理位置#
Destination GeoIP: Unknown #目的地理位置#

傳輸層的數據概況

Transmission Control Protocol, Src Port: 80 (80), Dst Port: 50054 (50054), Seq: 1, Ack: 624, Len: 159
#TCP頭部信息,源端口號:80,目的端口號:50054,序列號:1,確認序列號:624,下一個序列號:160#
Source Port: 80 #源端口號#
Destination Port: 50054 #目的端口號#
Sequence number: 1 (relative sequence number) #序列號 (相對序列號)#
[Next sequence number: 160 (relative sequence number)] #下一個序列號#
Acknowledgment number: 624 (relative ack number) #確認序列號#
Header Length: 20 bytes #頭部長度#
Flags: 0x018 (PSH, ACK) #TCP標記字段#
Window size value: 33 #流量控制的窗口大小#
Checksum: 0x639e [validation disabled] #TCP數據段的校驗和#

Wireshark數據包分析之數據包信息解讀