Tran,

Standard TDS headers are 4 bytes long.  The first byte is the 'packet type'.  
The second byte is the 'last packet indicator'.  The next two bytes are the 
'packet size'.  Thus, in your case, you should have gotten a 'packet size' that 
was greater than one Ethernet packet length (around 1500 bytes).

I suggest you look at: http://www.freetds.org/tds.html

DC
  ----- Original Message ----- 
  From: tran thanh 
  To: [email protected] 
  Sent: Thursday, July 23, 2009 7:31 PM
  Subject: Re: [Winpcap-users] Size of packet captured!


  Dear Varenni and Chang,
  Firstly thanks for your help,
  I'm using TCP!
  I got Full TDS message from 2 packets, 
  But new matter is how do I know that 2(or more) pakets is from a TDS message?
  Thanks,
  Tran Bach Thanh!





------------------------------------------------------------------------------


  _______________________________________________
  Winpcap-users mailing list
  [email protected]
  https://www.winpcap.org/mailman/listinfo/winpcap-users
_______________________________________________
Winpcap-users mailing list
[email protected]
https://www.winpcap.org/mailman/listinfo/winpcap-users

Reply via email to