Hi, I have the book (TCP/IP Illustrated, Volumen 1, W. Richard Stevens).
but excuse me!! All datagrams IP that I captured about one connection TCP, the IP header has "4000" (hex) as more fragments flag and fragment offset. A host send a sequence of 1635 bytes. I see: a) A first packet IP with 1460 bytes (total length 1500), flag: ACK, sequence IP: D5C1 b) A second packet IP with 175 bytes (total length 215), flag: ACK, PSH, sequence IP: D5C2 c) both packets have the same acknowledgment number D69D108E then 1) I can take the PSH as end of sequence of 1635 bytes? 2) the sequences IP D5C1 and D5C2 help me to order datagrams? 3) if both packets have the same acknowledgment number, it help? 4) why header ckecksum field of IP in some packets are 0000? no problem? 5) In the book I no found description of 3-bit fragments flag. what is the description? again I greatly appreciate your help Gustavo Cardenas ================================================================= This is the WinPcap users list. It is archived at http://www.mail-archive.com/[EMAIL PROTECTED]/ To unsubscribe use mailto: [EMAIL PROTECTED] =================================================================
