Packet Size

[raghulram]

Hi ...

I am sniffing the packets and i need to find the size of each packet(HEADER + DATA).
There is a field in IP HEADER called ip_totallength.Will this filed give the packet size..

plz help me..

[RobSeace]

Well, yes, the total length in the IP header should indeed give you the full size of
the header + data... However, in the case of fragmented packets, I believe each
fragment's total length value will only reflect the length of that fragment, so if you
care about the true original packet size, you'll need to do reassembly of the frags,
and add up the lengths of each...