tcpdump mailing list archives
Re: Wrong tcp sequence numbers???
From: Guy Harris <guy () alum mit edu>
Date: Wed, 22 Sep 2004 09:24:54 -0700
Claudio Lavecchia wrote:
3. How do you calculate size_ip?int size_ip = sizeof(struct sniff_ip);
Do any of the packets have IP options? If so, then that's *not* the size of the IP header.
You should get the IP header length from the header length/version field from the IP header (and should check that this field has a value >= 5, meaning 20 bytes, as that's the minimum IP header length).
- This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.
Current thread:
- Wrong tcp sequence numbers??? Claudio Lavecchia (Sep 21)
- Re: Wrong tcp sequence numbers??? Jefferson Ogata (Sep 21)
- Re: Wrong tcp sequence numbers??? ronnie sahlberg (Sep 21)
- Re: Wrong tcp sequence numbers??? Claudio Lavecchia (Sep 22)
- Re: Wrong tcp sequence numbers??? Jefferson Ogata (Sep 22)
- Re: Wrong tcp sequence numbers??? Guy Harris (Sep 22)
- Re: Wrong tcp sequence numbers??? Jefferson Ogata (Sep 21)