Parsing packets

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: "Galia" <galia@xxxxxxxxx>
Date: Tue, 18 Sep 2007 16:06:34 +0200

I Use WinPcap library to sniff my network card and I try to parse the
packets. In TCP stream I want to discriminate between tcp control packets
and actual data packets.
Checking the packet length usually works as its 20 bytes only, but I see
that sometime its 28 (when options are used).
Is there a way to accomplish my task?

Regards

Galia

.

Follow-Ups:
- Re: Parsing packets
  - From: Steve Alpert

Prev by Date: Re: searching another computer
Next by Date: Parsing packets
Previous by thread: Re: Proxy for w32 time service peer access
Next by thread: Re: Parsing packets
Index(es):
- Date
- Thread

Relevant Pages

Parsing packets
... In TCP stream I want to discriminate between tcp control packets ...
(microsoft.public.win32.programmer.networks)
Re: Parsing packets
... Arkady ... In TCP stream I want to discriminate between tcp control packets ...
(microsoft.public.win32.programmer.networks)
Re: Parsing packets
... I don't have all the info at my fingertips but if you use a "real" sniffer and look at the various flag bits, ... For example, when a session is established, there are SYN, SYN/ACK, and ACK packets. ... In TCP stream I want to discriminate between tcp control packets ...
(microsoft.public.win32.programmer.networks)
Re: Broken TCP/IP packets
... from the TCP stream up until you have 20 bytes, ... No converter will break up a 20 byte burst into multiple packets. ... happeneing its the worst converter I have ever seen. ...
(comp.arch.embedded)
RE: [fw-wiz] Stateful inspect on return web traffic - eek!
... BR> That looks like the last packets of a TCP stream that are being rejected ... BR> because your firewall is taking down the connection after your outgoing fin ... BR> unreachable, so the clients must be getting their traffic somehow, but ...
(Firewall-Wizards)