Re: TCP flags packet counting

[email protected] Sun, 9 Dec 2018 09:06:39 -0500
Newsgroups gmane.network.argus
Message-ID <[email protected]>
--Apple-Mail=_A3698CFE-FD9D-409F-994D-7D36C6EFEF7D
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

Hey Masoud,
We don=E2=80=99t track the number of packet types in a TCP connection, =
not something that has come up in a few decades.  It would be easy to =
do, and would involve extending the TCP DSR to add counters for each =
flag type, and of course all their combinations.  But as I mentioned, no =
one has been looking for those metrics. =20

Can you tell us why this is important to your thesis ???  Are you doing =
something for security or operations ???

Carter =20

> On Dec 8, 2018, at 3:01 PM, Masoud Sadri <[email protected]> =
wrote:
>=20
> Hi,
> In addition of total packets in each record I need to know the number =
of syn,ack,fin,rst,urg,psh,cwr,ece packets separably.=20
> Could you help me, please?
>=20
>  =
<https://www.avast.com/sig-email?utm_medium=3Demail&utm_source=3Dlink&utm_=
campaign=3Dsig-email&utm_content=3Dwebmail&utm_term=3Dicon>	=
Virus-free. www.avast.com =
<https://www.avast.com/sig-email?utm_medium=3Demail&utm_source=3Dlink&utm_=
campaign=3Dsig-email&utm_content=3Dwebmail&utm_term=3Dlink> =
<x-msg://26/#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>

--Apple-Mail=_A3698CFE-FD9D-409F-994D-7D36C6EFEF7D
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=utf-8

<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; =
charset=3Dutf-8"></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; line-break: after-white-space;" class=3D"">Hey =
Masoud,<div class=3D"">We don=E2=80=99t track the number of packet types =
in a TCP connection, not something that has come up in a few decades. =
&nbsp;It would be easy to do, and would involve extending the TCP DSR to =
add counters for each flag type, and of course all their combinations. =
&nbsp;But as I mentioned, no one has been looking for those metrics. =
&nbsp;</div><div class=3D""><br class=3D""></div><div class=3D"">Can you =
tell us why this is important to your thesis ??? &nbsp;Are you doing =
something for security or operations ???</div><div class=3D""><br =
class=3D""><div class=3D"">Carter &nbsp;<div><br class=3D""><blockquote =
type=3D"cite" class=3D""><div class=3D"">On Dec 8, 2018, at 3:01 PM, =
Masoud Sadri &lt;<a href=3D"mailto:[email protected]" =
class=3D"">[email protected]</a>&gt; wrote:</div><br =
class=3D"Apple-interchange-newline"><div class=3D""><div dir=3D"ltr" =
class=3D""><div class=3D"">Hi,</div><div class=3D"fonttools-rtl"><div =
class=3D"">In addition of total packets in each record I need to know =
the number of syn,ack,fin,rst,urg,psh,cwr,ece packets =
separably.&nbsp;</div><div class=3D"">Could you help me, =
please?</div></div></div><div id=3D"DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2" =
class=3D""><br class=3D"">
<table style=3D"border-top:1px solid #d3d4de" class=3D"">
	<tbody class=3D""><tr class=3D"">
        <td style=3D"width:55px;padding-top:13px" class=3D""><a =
href=3D"https://www.avast.com/sig-email?utm_medium=3Demail&amp;utm_source=3D=
link&amp;utm_campaign=3Dsig-email&amp;utm_content=3Dwebmail&amp;utm_term=3D=
icon" target=3D"_blank" class=3D""><img =
src=3D"https://ipmcdn.avast.com/images/icons/icon-envelope-tick-round-oran=
ge-animated-no-repeat-v1.gif" alt=3D"" width=3D"46" height=3D"29" =
style=3D"width: 46px; height: 29px;" class=3D""></a></td>
		<td =
style=3D"width:470px;padding-top:12px;color:#41424e;font-size:13px;font-fa=
mily:Arial,Helvetica,sans-serif;line-height:18px" class=3D"">Virus-free. =
<a =
href=3D"https://www.avast.com/sig-email?utm_medium=3Demail&amp;utm_source=3D=
link&amp;utm_campaign=3Dsig-email&amp;utm_content=3Dwebmail&amp;utm_term=3D=
link" target=3D"_blank" style=3D"color:#4453ea" =
class=3D"">www.avast.com</a>
		</td>
	</tr>
</tbody></table><a =
href=3D"x-msg://26/#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2" width=3D"1" =
height=3D"1" class=3D""></a></div>
</div></blockquote></div><br class=3D""></div></div></body></html>=

--Apple-Mail=_A3698CFE-FD9D-409F-994D-7D36C6EFEF7D--