detect Sent or received message?

Home Forums Discussions General Discussion detect Sent or received message?

This topic contains 3 replies, has 2 voices, and was last updated by  Vadim Smirnov 9 years, 5 months ago.

Viewing 4 posts - 1 through 4 (of 4 total)
  • Author
    Posts
  • #5172

    kf
    Participant

    Hi, how can i detect a packet has been sent away or has been received?

    please do not say me though the winpkfilter data. How can i handle that though the gernal ip-header or tcp-header?

    #6544

    Vadim Smirnov
    Moderator

    please do not say me though the winpkfilter data. How can i handle that though the gernal ip-header or tcp-header?

    You can try to match Ethernet/IP address information (an example, source MAC == local NIC MAC ==> outgoing), but this does not give any guarantee because it is possible to send an arbitrary packet on the network.

    #6545

    kf
    Participant

    hm okay thx. how works the winpkfilter, for setting up the SEND / Received message?

    and what do you think, how many packets are an overflow from the local mac if i capture theses by it

    #6546

    Vadim Smirnov
    Moderator

    how works the winpkfilter, for setting up the SEND / Received message?

    If packet comes from the network it is marked as ON_RECEIVE and ON_SEND otherwise.

    and what do you think, how many packets are an overflow from the local mac if i capture theses by it

    Sorry, I don’t understand the question, could you clarify?

Viewing 4 posts - 1 through 4 (of 4 total)

You must be logged in to reply to this topic.