[Winpcap-users] how to know if a packet sniffed is accessed from a website directly and not linked?

lovely hamis rahimahamis at yahoo.com
Sun Feb 28 17:33:25 PST 2010


is there any way to know if a certain tcp segment which has a request message to a server is directly accessed by a user through a browser. not just that its linked by the browser itself to complete the requested page. 
like for example, a web page with images, when one browses this page, the sniffer tends to get all this urls including the web page's and that of the images. what factors would let me identify which is which?!...

thanks alot in advance:) 


      
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.winpcap.org/pipermail/winpcap-users/attachments/20100228/215f2e13/attachment.htm 


More information about the Winpcap-users mailing list