Re: [tcpdump-workers] number of concurrent TCP sessions

2004-08-24 Thread Kiss Karoly
On Tue, 24 Aug 2004, [iso-8859-1] César Cárdenas wrote: > Dear all: > In a captured file I found '.', S, F and FP flags... > According to the manual: > > flag = '.' and data-seqno = '1' implies the first time tcpdump sees a TCP > conversation. > > flag = 'S' and 'win (value)' stands for the beginn

[tcpdump-workers] PCAP packet direction

2004-05-23 Thread Kiss Karoly
Hello all, Just a quick question: Using the pcap mechanism, is there a way to find out the direction of the packet going through the interface ??? I mean I would like to know if the packet is coming in on the interface or going out ??? Any help would be appreciated. Regards Kiss Karoly