On Mon, 12 Sep 2005 13:26:19 -0400 "Will H. Backman" <[EMAIL PROTECTED]> wrote:
> > > > This has most of the data that I need, but it seems to be missing > > one thing > > that I think is important. How can I determine if the traffic is > > TCP/UDP/ICMP etc? > > > If you have ack and window flags, then it is TCP, not UDP. What should I use to see packets at the ethernet level, such as ARP? -- http://edd.link9.net - http://irc.is-cool.net
