end of tcp stream .
- From: "Sharon" <Sharon669@xxxxxxxxxxx>
- Date: Thu, 28 Jul 2005 14:35:18 +0200
I'm a java/bv programmer sorry for my lack of Winsock knowledge (and lack
good English .)
I had this task to implement a simple sniffer (C code using Winsock )
searching the internet i found relatively simple code , and changed it
successfully according to my needs .
My problem is like that:
I am monitoring data sent over the TCP protocol,
The broadcasting station transmits different sizes of data, the problem I
encountered was when sending 6000 bytes of data.
This data is fragmented into 4 frames 1514 size each, between them I get
So I tried to count on the PUSH flag of TCP , but on the second frame - the
PUSH flag is 1
Professional sniffer shows something like :
1# frame 1514 PUSH = 0
2# frame 1514 PUSH = 1
3# frame 60 ACK
4# frame 60 ACK
5# frame 1514 PUSH = 0
6# frame 1514 PUSH = 1
What I'm trying to understand is how do I know when is the end of the TCP
How do I know when to stop extracting data from the TCP frames and send the
data to my host application (one level up)
Thank you very much
I will appreciate any help !
- Prev by Date: Re: Turning on "Register this connection's addresses in DNS" programmatically
- Next by Date: Re: IrDa print server - howto?
- Previous by thread: RunService ?
- Next by thread: Re: end of tcp stream .