<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.6000.16850" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>Tran,</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Standard TDS headers are 4 bytes long. The
first byte is the 'packet type'. The second byte is the 'last packet
indicator'. The next two bytes are the 'packet size'. Thus, in your
case, you should have gotten a 'packet size' that was greater than one Ethernet
packet length (around 1500 bytes).</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>I suggest you look at: <A
href="http://www.freetds.org/tds.html">http://www.freetds.org/tds.html</A></FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>DC</FONT></DIV>
<BLOCKQUOTE
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV
style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: black"><B>From:</B>
<A title=xbachngoctuyetx@gmail.com
href="mailto:xbachngoctuyetx@gmail.com">tran thanh</A> </DIV>
<DIV style="FONT: 10pt arial"><B>To:</B> <A title=winpcap-users@winpcap.org
href="mailto:winpcap-users@winpcap.org">winpcap-users@winpcap.org</A> </DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> Thursday, July 23, 2009 7:31
PM</DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> Re: [Winpcap-users] Size of
packet captured!</DIV>
<DIV><BR></DIV>Dear Varenni and Chang,<BR>Firstly thanks for your help,<BR>I'm
using TCP!<BR>I got Full TDS message from 2 packets, <BR>But new matter is how
do I know that 2(or more) pakets is from a TDS message?<BR>Thanks,<BR>Tran
Bach Thanh!<BR><BR><BR>
<P>
<HR>
<P></P>_______________________________________________<BR>Winpcap-users
mailing list<BR><A
href="mailto:Winpcap-users@winpcap.org">Winpcap-users@winpcap.org</A><BR><A
href="https://www.winpcap.org/mailman/listinfo/winpcap-users">https://www.winpcap.org/mailman/listinfo/winpcap-users</A><BR></BLOCKQUOTE></BODY></HTML>