I am writing a packet sniffer and have to detect when packets come from a certain website. I was wondering if the packet always contains a header, or if it is only a select few.
Thanks
Asked
Active
Viewed 1,281 times
-1
-
2TCP isn't in the same layer as HTTP. – David Nov 03 '17 at 10:13
-
2What does this happen to have with **C**? – Antti Haapala -- Слава Україні Nov 03 '17 at 10:14
-
2I'd say, learn about OSI layers first before you start writing a packet sniffer. Or get a decent one (e.g. Wireshark) and learn from there. – Bart Friederichs Nov 03 '17 at 10:15
-
You do not need TCP for HTTP! – Ed Heal Nov 03 '17 at 10:16
-
Since you tagged this in C I took the liberty to find an appropriate duplicate that goes further. – Antti Haapala -- Слава Україні Nov 03 '17 at 10:16
-
1@EdHeal just out of curiosity, have you ever encountered HTTP over something else than TCP in the wild? – Bart Friederichs Nov 03 '17 at 10:17
2 Answers
1
No. There are packets for the TCP handshake, and packets could contain only pieces of the request body.
Matt Ball
- 354,903
- 100
- 647
- 710