[Winpcap-users] Size of packet captured!

[David Chang]

Tran,

Standard TDS headers are 4 bytes long.  The first byte is the 'packet type'.  The second byte is the 'last packet indicator'.  The next two bytes are the 'packet size'.  Thus, in your case, you should have gotten a 'packet size' that was greater than one Ethernet packet length (around 1500 bytes).

I suggest you look at: http://www.freetds.org/tds.html

DC
  ----- Original Message ----- 
  From: tran thanh 
  To: winpcap-users at winpcap.org 
  Sent: Thursday, July 23, 2009 7:31 PM
  Subject: Re: [Winpcap-users] Size of packet captured!


  Dear Varenni and Chang,
  Firstly thanks for your help,
  I'm using TCP!
  I got Full TDS message from 2 packets, 
  But new matter is how do I know that 2(or more) pakets is from a TDS message?
  Thanks,
  Tran Bach Thanh!





------------------------------------------------------------------------------


  _______________________________________________
  Winpcap-users mailing list
  Winpcap-users at winpcap.org
  https://www.winpcap.org/mailman/listinfo/winpcap-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.winpcap.org/pipermail/winpcap-users/attachments/20090723/593aee02/attachment.htm