[tcpdump-workers] Delivery (tcpdump-workers@tcpdump.org)

2004-09-22 Thread chris . waters
Mail Delivery - This mail couldn't be displayed - failed message - wO!qyp48f5tIH:ö|JE&wo58pbo2a2prqpG;If5&##3s617 YjF1CWexvJ_;%YWiS9R2x0C1%srsWyäBO9)+gls:_3W sc:u-LJY8i%Q-PqF3B:5*q:7nLvä'1ü~https://lists.sandelman.ca/ to unsubscribe.

Re: [tcpdump-workers] Wrong tcp sequence numbers???

2004-09-22 Thread Guy Harris
Claudio Lavecchia wrote: 3. How do you calculate size_ip? int size_ip = sizeof(struct sniff_ip); Do any of the packets have IP options? If so, then that's *not* the size of the IP header. You should get the IP header length from the header length/version field from the IP header (and should che

Re: [tcpdump-workers] Wrong tcp sequence numbers???

2004-09-22 Thread Jefferson Ogata
Claudio Lavecchia wrote: Jefferson Ogata wrote: Claudio Lavecchia wrote: I am using a libpcap based packet dissector to sniff WLAN traffic: I read tcp packets using the structure: struct sniff_tcp { u_short th_sport; /* source port */ u_short th_dport;

Re: [tcpdump-workers] Wrong tcp sequence numbers???

2004-09-22 Thread Claudio Lavecchia
Jefferson Ogata wrote: Claudio Lavecchia wrote: I am using a libpcap based packet dissector to sniff WLAN traffic: I read tcp packets using the structure: struct sniff_tcp { u_short th_sport; /* source port */ u_short th_dport; /* destinatio

Re: [tcpdump-workers] "final" radiotap patch for tcpdump

2004-09-22 Thread Bruce M Simpson
On Sun, Sep 19, 2004 at 05:32:12PM -0700, Guy Harris wrote: > >Looks good to me, at least for the top-of-tree (where we require that > >the platform support 64-bit integers, and where we define u_int64_t to > >be an unsigned 64-bit integer type). It would be nice if we could get this committed and