LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Non-*NIX Forums > Programming
User Name
Password
Programming This forum is for all programming questions.
The question does not have to be directly related to Linux and any language is fair game.

Notices


Reply
  Search this Thread
Old 12-26-2007, 12:34 PM   #1
Valkyrie_of_valhalla
Member
 
Registered: Jan 2006
Location: Romania
Distribution: Suse 12.0, Slackware 12.1, Debian, Ubuntu, Gentoo
Posts: 301

Rep: Reputation: 30
documentation on TCP package structure?


I have a project idea... A program that analyzes tcp packages... But I need to learn a bit more about the TCP/IP protocol to actually get it going...

I got myself equipped with some good books, such as "TCP/IP Illustrated", but I would be interested in some good ( online? ) documentation regarding TCP package structure for various protocols...

I'm not interested in the header ( I know what that looks like already). I would like to know the body structure. (e.g. for the yahoo protocol, there are fields containing an ID and a value, separated by the bit value C0 80 if I remember correctly).

Can anybody suggest some good documentation on this subject?

Thanks for reading. Any other suggestions, ideas or tips are welcomed
 
Old 12-26-2007, 12:52 PM   #2
Nylex
LQ Addict
 
Registered: Jul 2003
Location: London, UK
Distribution: Slackware
Posts: 7,464

Rep: Reputation: Disabled
Well the data contained in a TCP segment is going to be the header + data of whatever application layer protocol is being used, so you'll want to look up the details of the specific protocol you're interested in.
 
Old 12-26-2007, 12:57 PM   #3
Valkyrie_of_valhalla
Member
 
Registered: Jan 2006
Location: Romania
Distribution: Suse 12.0, Slackware 12.1, Debian, Ubuntu, Gentoo
Posts: 301

Original Poster
Rep: Reputation: 30
Yup, that's the idea...
I'm searching for documentation regarding the most important protocols out there... http, ftp, etc.
Just the basic package structure, not the whole tutorials on how to implement it in a program, or anything...

EDIT: Ok, a bit more details...
I'm thinking of writing a program that identifies the type of package it is, and that displays (when possible) it's contents. E.G. you capture a package with tcpdump, and: if it's a yahoo protocol package, creates a log file with the conversations. If it's http protocol, getting a website, it saves the website and all it's contents, making a user able to view it, etc. It shouldn't be difficult, but it's a lot of work; it's a good opportunity for me to learn about the TCP/IP protocols and networks.

Last edited by Valkyrie_of_valhalla; 12-26-2007 at 01:08 PM.
 
Old 12-28-2007, 08:41 PM   #4
orgcandman
Member
 
Registered: May 2002
Location: new hampshire
Distribution: Fedora, RHEL
Posts: 600

Rep: Reputation: 110Reputation: 110
don't mean to burst your bubble, but ethereal already does this.
 
Old 12-28-2007, 09:08 PM   #5
Valkyrie_of_valhalla
Member
 
Registered: Jan 2006
Location: Romania
Distribution: Suse 12.0, Slackware 12.1, Debian, Ubuntu, Gentoo
Posts: 301

Original Poster
Rep: Reputation: 30
hmm, more details please?
 
Old 12-29-2007, 02:16 AM   #6
Nylex
LQ Addict
 
Registered: Jul 2003
Location: London, UK
Distribution: Slackware
Posts: 7,464

Rep: Reputation: Disabled
Indeed it does. It's called Wireshark now.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
TCP package question Alexander.s Linux - Networking 6 07-10-2007 08:56 AM
Linux change TCP kernel Parameter for TCP DELAY ACK TICKS linux_mando Linux - Networking 5 08-22-2006 08:20 AM
Adept Package Manager Documentation? smannell Ubuntu 5 07-15-2006 09:06 PM
Which package contains man pages documentation for c++ functions ikk Linux - Software 3 03-14-2006 02:16 PM
Woody 3.0 Open Ports 1470/tcp/uaiact 1518/tcp/vpvd What for?How can I remove them? alexxxis Debian 5 07-05-2004 05:18 PM

LinuxQuestions.org > Forums > Non-*NIX Forums > Programming

All times are GMT -5. The time now is 07:23 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration