Re: [WinPcap-users] Off Topic

[KanjiSoft Systems]

As was mentioned, there's a flag on the ip header that indicates framentation, and there's a sequence number assigned to each fragment.   To  know what ACK flag means, you should read up a little bit on TCP. Basically it indicates the last sequence number received, so TCP can know what to resend (since TCP is a guaranteed delivery protocol)   There a great book by Stevens called TCP/IP illustrated that explains these points in great detail. If you're reconstructing fragmented packets, you will need this kind of familarity.   Regards, Mark        ----- Original Message ----- From: Cardenas Arevalo Gustavo Antonio To: [EMAIL PROTECTED] Sent: Tuesday, September 28, 2004 9:55 AM Subject: [WinPcap-users] Off Topic Hi,   I'm using Winpcap to capture packets between two PCs. they are packets TCP.   1. How can I know when a packet is fragmented? I need reassembler it.     2. How can I know when a packet have data?    I got a Packet that It had One in the flag ACK ,and The Flag PSH is Cero. I greatly appreciate your help Gustavo Cardenas