For instance, a WireShark capture filter example I found - tcp[13] & 8 == 8
represents packets with PSH flags.
How do I count the 8
?
Based on the wikipedia image,
PSH is in the middle of the TCP flags segment. Counting 1 from the NS flag, PSH bit representation should be 6 ?
Any guidance is appreciated.