Re: [tcpdump-workers] Getting TCP packet payload length with pcap

2007-08-08 Thread Nick Chorley
I'm having some problems with this I think. This is what my code looks like (irrelevant bits omitted): struct ip *ip_packet = (struct ip*)(packet + sizeof(struct ether_header)); struct tcphdr *tcp_packet = (struct tcphdr*)(packet + sizeof(struct ether_header) + sizeof

Re: [tcpdump-workers] Getting TCP packet payload length with pcap

2007-08-08 Thread Nick Chorley
On 08/08/2007, Luis Martín García <[EMAIL PROTECTED]> wrote: > > The only difference between the structure definitions that you are using > and > the sniffex_XXX ones is probably the name of the structure members. The > process detailed in > http://www.tcpdump.org/lists/workers/2005/05/msg00021.htm

Re: [tcpdump-workers] Getting TCP packet payload length with pcap

2007-08-08 Thread Luis Martín García
The only difference between the structure definitions that you are using and the sniffex_XXX ones is probably the name of the structure members. The process detailed in http://www.tcpdump.org/lists/workers/2005/05/msg00021.html is correct, just check that you translate the struct member names to th

[tcpdump-workers] Getting TCP packet payload length with pcap

2007-08-08 Thread Nick Chorley
Hi, I have found another post in the mailing list about this ( http://www.tcpdump.org/lists/workers/2005/05/msg00021.html), but it appears to use structs sniff_ip and sniff_tcp that are declared in the sniffex program. In my program, I'm using the structs for the IP and TCP headers as defined in n