Remote overflows - Finding offsets

[steve lord <stevel () LINUXIT COM>]

I'm currently learning how to write buffer overflow exploits, and was
wondering if anyone had any tips for finding the offsets to put your
shellcode into remotely. I know locally you can get the esp but I'm
trying to work on remote overflows and I haven't a clue how to get them.
Does anyone know of any good tutorials/sources of info for finding esp
remotely?

Thanks,

Steve