Wireshark-users: Re: [Wireshark-users] Track a packet in source & destination end sniffer capture
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Andrej van der Zee <andrejvanderzee@xxxxxxxxx>
Date: Tue, 6 Sep 2011 12:32:08 +0200
>> I have taken sniffer capture at both ends(source & destination) of
>> communication but how can I track a single packet at both sides of
>> capture. Is there any unique # tagged into the packet from which it
>> can be identified that this is the packet reaching the destination
>> side capture which was sent by source.

Provided its a TCP packet, in 99,99% you should be OK using the
IP-layer id + TCP-layer (absolute) sequence & ack number, in addition
to the src/dst addr/port.

Cheers,
Andrej