Re: [tcpdump-workers] pcap captures null packets?

2005-07-19 Thread Thinh Ho
Thanks! i JUST tried that and it is working fine now... appreciate the response. -Thinh On 7/19/05, Christian Kreibich <[EMAIL PROTECTED]> wrote: > and memcpy the packet data -- Thinh Ho University of Virginia Engineering School C: 571-594-1473 - This is the tcpdump-workers list. Vi

[tcpdump-workers] pcap captures null packets?

2005-07-19 Thread Thinh Ho
pcap_dump(dumpfile, header, pkt_data); // add to pkts_list node *curr = new node(header, pkt_data); pkts.push_back(*curr); Any inputs? Thank you. -Thinh -- Thinh Ho University of Virginia Engineering School C: 571-594-1473 - This is the tcpdump-workers list. Visit h

Re: [tcpdump-workers] complete struct for tcp_header

2005-07-12 Thread Thinh Ho
ore them in the two long variables being passed in. Any ideas on how to extracting each 4 bytes number? -Thinh On 7/11/05, Guy Harris <[EMAIL PROTECTED]> wrote: > Thinh Ho wrote: > > Is there a struct for the options field of tcp_header? > > No. That field is variable in both l

Re: [tcpdump-workers] complete struct for tcp_header

2005-07-11 Thread Thinh Ho
Is there a struct for the options field of tcp_header? On 7/9/05, rootclown <[EMAIL PROTECTED]> wrote: > dear Thinh Ho: > get tcp header with the following way > > struct ethhdr *eth; > struct iphdr *ip; > struct tcphdr *tcp; > > eth=(st

[tcpdump-workers] complete struct for tcp_header

2005-07-08 Thread Thinh Ho
Hello, I am new to the mailing list and also new to pcap, tcpdump, and tcp, in general. I am trying to capture tcp packets and extract/print all its fields in readable format. The sniffer works and I was able to print out the whole packet (in hex) and confirmed it with Ethereal. The struct I have f