On 2017年02月28日 14:11, Zhang Chen wrote:
OK, How about this?
+ /*
+ * Because of ppkt and spkt are both in the same connection,
+ * The ppkt's src ip, dst ip, src port, dst port, ip_proto all are
+ * same with spkt. In addition, IP header's Identification is a
random
+ * field, we can handle it in IP fragmentation function later.
+ * So we just compare the ip payload here. we ignored all IP header
+ * include other field like TOS,TTL,IP Checksum.
+ */
Thanks
Zhang Chen
But this does not explain why we can ignore those fields.
Thanks