detect Sent or received message?

Home › Forums › Discussions › General › detect Sent or received message?

Viewing 4 posts - 1 through 4 (of 4 total)
  • Author
    Posts
  • February 7, 2008 at 11:42 pm #5172
    kf
    Participant

      Hi, how can i detect a packet has been sent away or has been received?

      please do not say me though the winpkfilter data. How can i handle that though the gernal ip-header or tcp-header?

      February 11, 2008 at 8:41 pm #6544
      Vadim Smirnov
      Keymaster

        please do not say me though the winpkfilter data. How can i handle that though the gernal ip-header or tcp-header?

        You can try to match Ethernet/IP address information (an example, source MAC == local NIC MAC ==> outgoing), but this does not give any guarantee because it is possible to send an arbitrary packet on the network.

        February 24, 2008 at 9:55 pm #6545
        kf
        Participant

          hm okay thx. how works the winpkfilter, for setting up the SEND / Received message?

          and what do you think, how many packets are an overflow from the local mac if i capture theses by it

          February 25, 2008 at 10:53 am #6546
          Vadim Smirnov
          Keymaster

            how works the winpkfilter, for setting up the SEND / Received message?

            If packet comes from the network it is marked as ON_RECEIVE and ON_SEND otherwise.

            and what do you think, how many packets are an overflow from the local mac if i capture theses by it

            Sorry, I don’t understand the question, could you clarify?

          • Author
            Posts
          Viewing 4 posts - 1 through 4 (of 4 total)
          • You must be logged in to reply to this topic.