Hi , I'm writing this code in VC using Winsock 2, the Ethernet frames I
receive
are fragmented to 1524 byte due to Ethernet limitations,

my code is based on this simple TCP sniffer
http://www.sol-biotech.com/code/Sockets/Main.cpp

Is there any way I can instruct Winsock to assemble the frame before I'm
sending it to the application layer, I want to avoid the overhead of
reassembling the frames

Thank you,
Sharon.G

Re: Winsock 2 & Ethernet fragmentation by Thomas

Thomas
Tue Mar 15 14:14:52 CST 2005


"Sharon" <Sharon669@hotmail.com> wrote in message
news:%23jUo5mZKFHA.4056@TK2MSFTNGP14.phx.gbl...
> Hi , I'm writing this code in VC using Winsock 2, the Ethernet frames I
> receive
> are fragmented to 1524 byte due to Ethernet limitations,
>
> my code is based on this simple TCP sniffer
> http://www.sol-biotech.com/code/Sockets/Main.cpp
>
> Is there any way I can instruct Winsock to assemble the frame before I'm
> sending it to the application layer, I want to avoid the overhead of
> reassembling the frames
>
No.

The Raw Sockets sniffer is returning Raw Ethernet packet. It cannot be
coaxed into re-assembling the raw packets for you.

You must re-assemble then (accounting for duplicate and dropped packets...)
yourself.

Good luck,

Thomas F. Divine, Windows DDK MVP
http://www.rawether.net

> Thank you,
> Sharon.G
>