A little help here please!

[rivenbryan]

Hey! Would like a little help here!

In my excel file, I have a column for flag. However, it is all decoded into TCP flag numbers.

Okay basically, I need to a way to change the numbers (TCP flag) to TCP flag names as SYN/ACK etc so that i can use it for my visualization.

such as,

16 =  ACK

and 

18 = SYN,ACK 

At first, i was thinking of mapping it by an excel file. However, I was unable to find a template for numbers to TCP flag.

[jpenuliar · Accepted solution]

Hi Rivenbryan,

I guess you have to build a mapping file yourself. according to this link:
https://danielmiessler.com/study/tcpflags/
Packet URG ACK PSH RST SYN FIN
Decimal 32 16 8 4 2 1
Binary 0 1 0 0 1 0

the flags corresponds to position of flag in a binary scale

2=ACK
16=SYN
therefore
18 = SYN,ACK by concatenating values

[rivenbryan]

Its ok, i got it already. Thanks bro.