Qlik Community

Ask a Question

New to Qlik Sense

If you’re new to Qlik Sense, start with this Discussion Board and get up-to-speed quickly.

Announcements
QlikWorld starts MONDAY! last chance to register is now ! REGISTER NOW
cancel
Showing results for 
Search instead for 
Did you mean: 
rivenbryan
Contributor
Contributor

A little help here please!

Hey! Would like a little help here!

In my excel file, I have a column for flag. However, it is all decoded into TCP flag numbers.

Okay basically, I need to a way to change the numbers (TCP flag) to TCP flag names as SYN/ACK etc so that i can use it for my visualization.

such as,

16 =  ACK

and 

18 = SYN,ACK 

At first, i was thinking of mapping it by an excel file. However, I was unable to find a template for numbers to TCP flag.

 

Capture.PNG

1 Solution

Accepted Solutions
jpenuliar
Partner
Partner

Hi Rivenbryan,

I guess you have to build a mapping file yourself. according to this link:
https://danielmiessler.com/study/tcpflags/
Packet URG ACK PSH RST SYN FIN
Decimal 32 16 8 4 2 1
Binary 0 1 0 0 1 0

the flags corresponds to position of flag in a binary scale

2=ACK
16=SYN
therefore
18 = SYN,ACK by concatenating values

View solution in original post

2 Replies
jpenuliar
Partner
Partner

Hi Rivenbryan,

I guess you have to build a mapping file yourself. according to this link:
https://danielmiessler.com/study/tcpflags/
Packet URG ACK PSH RST SYN FIN
Decimal 32 16 8 4 2 1
Binary 0 1 0 0 1 0

the flags corresponds to position of flag in a binary scale

2=ACK
16=SYN
therefore
18 = SYN,ACK by concatenating values

View solution in original post

rivenbryan
Contributor
Contributor
Author

Its ok, i got it already. Thanks bro.