On Tue, 21 Sep 2004 10:38:27 -0400, Jefferson Ogata [snip] > > but in my code when I try to read the tcp sequence numbers, I get very > > odd values of sequence number. Here follows the code snippet I use to > > read sequence number. The values I get do not correspond to the ones I > > read using ethereal, for example. > > 2. What do you mean by "odd"?
Keep in mind that ethereal by default will convert all sequence and ack numbers to relative numbers. Relative to the first seen segment in the trace. This can make the sequence and ack numbers look different to what many other tools may display them as. - This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.
