Re: [WinPcap-users] determionation of the packet protocol

2005-03-31 Thread Joao Lopes
Another thing ... How can i analyse IP Packet and discovery if the application protocol who send him is HTTP, FTP, SMTP, etc.. ? Flamur Rogova wrote: Hi, How can I determine after pcap_next_ex whether the caught packet was from UDP or TCP connection? you have to

Re: [WinPcap-users] determionation of the packet protocol

2005-03-31 Thread Flamur Rogova
Hi, How can I determine after pcap_next_ex whether the caught packet was from UDP or TCP connection? you have to parse IP header and read the protocol field, which tells what type of packet is carried within IP packet, (TCP, UDP, ICMP, ) here is an example

Re: [WinPcap-users] determionation of the packet protocol

2005-03-31 Thread Flamur Rogova
On Thu, 31 Mar 2005 14:23:03 +0100 Joao Lopes [EMAIL PROTECTED] wrote: Another thing ... How can i analyse IP Packet and discovery if the application protocol who send him is HTTP, FTP, SMTP, etc.. ? to determine application protocol type look at port number/transport combination.

RE: [WinPcap-users] INTERFACE DETECTION FAILED WITH WINPCAP3.0

2005-03-31 Thread Elwin Nieuwenhuis
Hi, I tried your suggestion but with no results at first. Next I deïnstalled the Bluetooth device(s) and deleted in the registry remained Bluetooth related links. Also in the range of the 4D36E972-E325-11CE-BFC1-08002bE10318 - classes Besides that, I also cleared up (many) unused

RE: [WinPcap-users] determionation of the packet protocol

2005-03-31 Thread Alex Narinsky
Thank you I checked the protocol field in the ip header. It is 6 for TCP packets and 17 for UDP. Are there any definitions for these values for the protocol field? -Original Message- From: Flamur Rogova [mailto:[EMAIL PROTECTED] Sent: Thursday, March 31, 2005 6:14 AM To:

[WinPcap-users] Problem using TG and Sendcap samples on XP

2005-03-31 Thread Hadriel Kaplan
Ciao winpcap gods, (always good to start a cry for help with a sign of respect, eh?) I am trying to write a packet transmit tool using winpcap, since Msoft in their infinite unwisdom removed raw socket support from XPSP2. In order to save much time (and because pressing F7 is not hard), I