Re: Parsing packets

Yes, you need to check if options exist and parse accordingly due to RFC793
http://www.faqs.org/rfcs/rfc793.html .
Arkady

"Galia" <galia@xxxxxxxxx> wrote in message
news:el0B%23Qp%23HHA.1212@xxxxxxxxxxxxxxxxxxxxxxx
I Use WinPcap library to sniff my network card and I try to parse the
packets. In TCP stream I want to discriminate between tcp control packets
and actual data packets.
Checking the packet length usually works as its 20 bytes only, but I see
that sometime its 28 (when options are used).
Is there a way to accomplish my task?

Regards

Galia




.

Relevant Pages

  • Re: Broken TCP/IP packets
    ... from the TCP stream up until you have 20 bytes, ... No converter will break up a 20 byte burst into multiple packets. ... happeneing its the worst converter I have ever seen. ...
    (comp.arch.embedded)
  • RE: [fw-wiz] Stateful inspect on return web traffic - eek!
    ... BR> That looks like the last packets of a TCP stream that are being rejected ... BR> because your firewall is taking down the connection after your outgoing fin ... BR> unreachable, so the clients must be getting their traffic somehow, but ...
    (Firewall-Wizards)
  • Parsing packets
    ... In TCP stream I want to discriminate between tcp control packets ...
    (microsoft.public.win32.programmer.networks)
  • Parsing packets
    ... In TCP stream I want to discriminate between tcp control packets ...
    (microsoft.public.win32.programmer.networks)
  • Re: firewall and UDP packets, and errocode 10004
    ... Did you tried to uninstall/install TCP stack, ... Arkady Frenkel wrote: ... MSAFD TCPIP TCP/IP ... I have an application that sends UDP packets. ...
    (microsoft.public.win32.programmer.networks)