detect Sent or received message?

Home Forums Discussions General Discussion detect Sent or received message?

Viewing 4 posts - 1 through 4 (of 4 total)
  • Author
    Posts
  • #5172
    kf
    Participant

    Hi, how can i detect a packet has been sent away or has been received?

    please do not say me though the winpkfilter data. How can i handle that though the gernal ip-header or tcp-header?

    #6544
    Vadim Smirnov
    Moderator

    please do not say me though the winpkfilter data. How can i handle that though the gernal ip-header or tcp-header?

    You can try to match Ethernet/IP address information (an example, source MAC == local NIC MAC ==> outgoing), but this does not give any guarantee because it is possible to send an arbitrary packet on the network.

    #6545
    kf
    Participant

    hm okay thx. how works the winpkfilter, for setting up the SEND / Received message?

    and what do you think, how many packets are an overflow from the local mac if i capture theses by it

    #6546
    Vadim Smirnov
    Moderator

    how works the winpkfilter, for setting up the SEND / Received message?

    If packet comes from the network it is marked as ON_RECEIVE and ON_SEND otherwise.

    and what do you think, how many packets are an overflow from the local mac if i capture theses by it

    Sorry, I don’t understand the question, could you clarify?

Viewing 4 posts - 1 through 4 (of 4 total)
  • You must be logged in to reply to this topic.