Share

SharpPcap

The forum address has changed, you have been automatically redirected. Please update any bookmarks to use the new URL.

Subscribe

Closing an Established Connection

You are viewing a single message from this topic. View all messages.

  1. 2009-02-26 12:30:17 UTC
    Riyaz,

    Closing a connection by sending a spoofed RST pkt is not a trivial task. You need to keep track of the sequence numbers of the connection and inject your packet with the correct sequence number expected by the target machine. With some luck you may even succeed with this.
    However, most probably this is *not* the way sysinternals had implemented their tcpview application. They probably utilizing some Win32 API call to terminate an existing socket, which causes the Windows TCP/IP stack to send a legit RST packet.
< Previous | 1 | Next >

Add a Reply

This forum does not allow anonymous participation.

Log in to add a reply. Not registered? Create an account to participate and receive email updates when replies are posted to this topic.