-
http://www.mirrorservice.org/sites/ftp.wiretapped.net/pub/security/packet-capture/winpcap/misc/faq.htm#Q-17 Apparently not. :-(.
2009-11-07 23:05:57 UTC by jordanwb
-
All right I'll take a look and if needed, ask them.
2009-11-07 23:01:48 UTC by jordanwb
-
Hello.
I don't believe that packets can be blocked with pcap or winpcap, but I might be wrong about this. If you ask them or read about winpcap functionality and it *can* block packets, then that is something I would be willing to add to sharppcap in short order.
Sharppcap is more of an interface/helper library. We rely on the functionality of winpcap/pcap and .net and provide a c#...
2009-11-07 22:09:34 UTC by chrismorgan
-
How would I block packets coming from a specific IP, port and protocol?.
2009-11-07 21:38:23 UTC by jordanwb
-
What do the letters A and Z denote?
What happens to duplicate packets?
What if the user wants to inspect the packets in the order they arrived and not just the tcpdata?
You probably want to write some unit tests that use wireshark pcap capture files to validate the code.
Chris.
2009-11-05 19:50:11 UTC by chrismorgan
-
Ha now that I post this I think I found that the connections never set their status to closed, I'll look into that soon but the data is all there never the less.
2009-11-05 11:00:49 UTC by Andrew Luitink
-
First off sorry if I made any stupid mistakes, I am always open for new ideas, there are portions of the code that require a bit of maintenance and clean up yet but for the most part I believe it works, I was able to process 64MB worth of capture data flawlessly, but I am not sure how it will handle all situations, please feel free to try it use it change it but if you would could you please...
2009-11-05 10:58:35 UTC by Andrew Luitink
-
Tnx for the answer,msn was just an example :)) No matter what,SharPcap is great library,I hope that soon some documentation will be available.
2009-11-05 09:12:21 UTC by darth-ivan
-
I think you would have to know more about how the msn file transfer protocol worked to know that. You could also use the gnu 'file' utility on the first few bytes of the file, or whatever library that utility uses. It can recognize the format of most any file.
Chris.
2009-11-05 00:42:58 UTC by chrismorgan
-
Hello,I have another question,when I'm monitoring msn file transfer ports,I can capture files that are send over these port,but how can I recognized is this file is pic,or pdf,or what extension is it,or how big is this file,...? please some example,link,anything that would help me.
Tnx you very much :))
2009-11-02 18:27:02 UTC by darth-ivan
