<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Dear Tom,<br>
<br>
Thank you for your reply.<br>
<br>
Maybe it is my fault that I did not explain further.<br>
<br>
I have an application that would be sniffing the network and I am
interested in HTTP connections, so I need to reconstruct the full TCP
stream of a connection from start to end so that I can take the stream
as one big buffer and process it further.<br>
<br>
Thanks.<br>
<br>
Thomas O'Hare wrote:
<blockquote cite="mid44E0FE4A.7020009@RedTile.Com" type="cite">
<pre wrap="">Ralph
I will go out on a limb here and anyone else is free to jump in...
The nature of TCP/IP is a "connection oriented" protocol. Which mean a
real connection exists between 2 hosts. If the protocol stack is
anywhere near what it should be, then if there are problems with packets
the sending host is supposed to resend the problem data.
So trying to recover and re-assemble packets seems to me to be
defeating, or at least making a lot more work for something that is
supposed to be done for you anyway by the stack.
If I totally missed the boat, then please explain a little further.
But it is late here, I am tired and so I am at a loss as to why you want
to work so hard...
Thanks,
~ Thomas O'Hare ~
President, RedTile, Inc. - DBA: RedTile Software
Web, Wireless, Network, Database & Systems Software
+1.407.295.9148 ; +49.8651.717950 ; <a class="moz-txt-link-freetext" href="http://www.RedTile.Com/">http://www.RedTile.Com/</a>
Operations Manager; Virtual FoxPro User Group
<a class="moz-txt-link-abbreviated" href="mailto:Tom@VFUG.Org">Tom@VFUG.Org</a> ; <a class="moz-txt-link-freetext" href="http://www.VFUG.Org/">http://www.VFUG.Org/</a>
Accounts wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Hi All,
I believe this question was asked before without a clear answer. Is
there a definite or a standard way/library of reassembling the tcp/ip
stack from the sniffed packets?
I wanted to write one myself but the biggest problem that I have
faced is debugging, is there a software out there that can simulate
sending packets on demand (like fragmented and oob...) so that it could
aid in the development and debugging of a code that does the reassembly?
Thank you all.
Ralph.
_______________________________________________
Winpcap-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Winpcap-users@winpcap.org">Winpcap-users@winpcap.org</a>
<a class="moz-txt-link-freetext" href="https://www.winpcap.org/mailman/listinfo/winpcap-users">https://www.winpcap.org/mailman/listinfo/winpcap-users</a>
</pre>
</blockquote>
<pre wrap=""><!---->_______________________________________________
Winpcap-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Winpcap-users@winpcap.org">Winpcap-users@winpcap.org</a>
<a class="moz-txt-link-freetext" href="https://www.winpcap.org/mailman/listinfo/winpcap-users">https://www.winpcap.org/mailman/listinfo/winpcap-users</a>
</pre>
</blockquote>
<br>
</body>
</html>