Absolute ack and seq number of tcp packet

--===============1224389309==
Content-Type: multipart/alternative; boundary="0000000000000cbed405986d3d03"

--0000000000000cbed405986d3d03
Content-Type: text/plain; charset="UTF-8"

Hi

In the tcp_packet event, how can I obtain the *absolute values* (found in
the tcp header), not the relative values of ack and seq numbers.

Best regards,

Hui Lin
-- 
Hui Lin
Ph.D. Candidate (http://hlin33.web.engr.illinois.edu/)
DEPEND (http://depend.csl.illinois.edu/)
ECE, Uni. of Illinois at Urbana-Champaign

--0000000000000cbed405986d3d03
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_default" style=3D"font-family:arial,he=
lvetica,sans-serif">Hi=C2=A0</div><div class=3D"gmail_default" style=3D"fon=
t-family:arial,helvetica,sans-serif"><br></div><div class=3D"gmail_default"=
 style=3D"font-family:arial,helvetica,sans-serif">In the tcp_packet event, =
how can I obtain the <b>absolute values</b> (found in the tcp header), not =
the relative values of ack and seq numbers.=C2=A0</div><div class=3D"gmail_=
default" style=3D"font-family:arial,helvetica,sans-serif"><br></div><div cl=
ass=3D"gmail_default" style=3D"font-family:arial,helvetica,sans-serif">Best=
 regards,</div><div class=3D"gmail_default" style=3D"font-family:arial,helv=
etica,sans-serif"><br></div><div class=3D"gmail_default" style=3D"font-fami=
ly:arial,helvetica,sans-serif">Hui Lin</div>-- <br><div dir=3D"ltr" class=
=3D"gmail_signature" data-smartmail=3D"gmail_signature"><div dir=3D"ltr"><d=
iv><div dir=3D"ltr"><div><div dir=3D"ltr"><div><font face=3D"arial, helveti=
ca, sans-serif" size=3D"2">Hui Lin</font><div><font face=3D"arial, helvetic=
a, sans-serif" size=3D"2">Ph.D. Candidate (<a href=3D"http://hlin33.web.eng=
r.illinois.edu/" target=3D"_blank">http://hlin33.web.engr.illinois.edu/</a>=
)=C2=A0</font></div><div><font face=3D"arial, helvetica, sans-serif" size=
=3D"2">DEPEND (<a href=3D"http://depend.csl.illinois.edu/" target=3D"_blank=
">http://depend.csl.illinois.edu/</a>)<br>ECE, Uni. of Illinois at Urbana-C=
hampaign=C2=A0</font></div><div><br></div></div></div></div></div></div></d=
iv></div></div>

--0000000000000cbed405986d3d03--

--===============1224389309==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Zeek mailing list
[email protected]
http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek
--===============1224389309==--