[Winpcap-users] IP Header Fields

[Gianluca Varenni]

WinPcap gives you raw packets, so ethernet packets if you are on 
Ethernet/Wireless, as a raw buffer of bytes.

It's the developer's job to properly decode these arrays of bytes correctly 
and extract the protocol fields he needs (in your case, some IP fields).

A good starting point to understand how to decode packets is
1. looking at the protocol headers specification. A very good resource for 
this is www.protocols.com
2. having a look at some open source protocol analyzers like tcpdump 
(www.tcpdump.org) or ethereal (www.ethereal.com)

Hope it helps
GV


----- Original Message ----- 
From: <m.shafique at uaeu.ac.ae>
To: <winpcap-users at winpcap.org>
Sent: Thursday, March 09, 2006 1:48 AM
Subject: [Winpcap-users] IP Header Fields


> Hi,
> I am new to Winpcap library. I want to access all fields(id, flags, 
> protocol, checksum, options, addresses etc ) of IP header. Is it possible 
> to access and then read/write information in IP header using Winpcap?
>
> Any help is highly appreciated!
>
> Thanks and regards,
> Shafique
>
> _______________________________________________
> Winpcap-users mailing list
> Winpcap-users at winpcap.org
> https://www.winpcap.org/mailman/listinfo/winpcap-users
>