tcpdump mailing list archives

IP Header Size is always 5


From: Shameem Ahamed <shameem.ahamed () hotmail com>
Date: Wed, 1 Apr 2009 20:42:04 +0530


Hi All,

I was trying to create a function (for testing purpose) which displays the header information for Ethernet, IP and TCP 
using a Linux machine. The problem i am having is, whenever i read any packet from the saved pcap file, it displays the 
IP header size (ip->ip_hl) is 5 (some times less than 5).

Part of the code is given below

static int pack_count=1;        //Packet Count
struct ether_header *ethHeader; //Ethernet Header
struct ip *ipHeader;    //IP Header
struct tcphdr *tcpHeader;       //TCP Header
char *payload;  //Payload
unsigned int size_ip;   //Size of the IP Header
unsigned int size_tcp;  //Size of the TCP Header
char protoname[20];

ethHeader=(struct ether_header*)packet;
ipHeader=(struct ip*)(packet+ETHER_SIZE);

size_ip=ipHeader->ip_hl;
printf("Packet Count is: %d \n",pack_count);
pack_count++;

printf("=================IP Header Details ============== \n");
printf("IP Header Length is: %d \n",ipHeader->ip_hl);



Please help me.



Regards,
Shameem

_________________________________________________________________
Windows Live Messenger. Multitasking at its finest.
http://www.microsoft.com/india/windows/windowslive/messenger.aspx-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.


Current thread: