You'd have to change the TCP sequence number to the next one in the sequence. This would be Original Seq Number + Data length. You would have to recalculate the checksum.
Alternatively, the correct sequence number would also be available from the acknowledgement number in the reply from the server. If the original packet had the FIN flag set then the new packet would not be accepted. On Fri, 28 Feb 2003 17:54:36 +0300 Sergej Kononov <[EMAIL PROTECTED]> wrote: > If to change in IP heading the identifier and recalc checksum then the server will > accept a package? > > DD> It could also be possible that the server has already seen the packet > DD> (identifier) and so it just drops the packet. Tcp has an identifier in it, > DD> so if you use a TCP socket, it could be that the stack just drops it and > DD> answers, not the server. This is the time-window in TCP... > ================================================================== This is the WinPcap users list. It is archived at http://www.mail-archive.com/[EMAIL PROTECTED]/ To unsubscribe use mailto: [EMAIL PROTECTED] ==================================================================
