[Winpcap-users] TCP Header and Flags

ahsan askari ahsanaskari at gmail.com
Thu Jul 6 17:07:30 GMT 2006


I had a look at sniffex.c at http://www.tcpdump.org/pcap.htm and I found the
TCP Header structure. That structure has the following

        u_char  th_flags;
        #define TH_FIN  0x01
        #define TH_SYN  0x02
        #define TH_RST  0x04
        #define TH_PUSH 0x08
        #define TH_ACK  0x10
        #define TH_URG  0x20
        #define TH_ECE  0x40
        #define TH_CWR  0x80
        #define TH_FLAGS

I know that if I want to check any flag value in th_flags field I just have
to "&" that with flag value but could anyone tell me how I could use
TH_FLAGS and why is it there ?

Thank you
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.winpcap.org/pipermail/winpcap-users/attachments/20060706/db1bccb1/attachment.htm

More information about the Winpcap-users mailing list