Can't find Socket ID. How can I know that all packets are in the same socket. asked 19 Apr '16, 00:49  AMitiev |
One Answer:
A socket is the combination of the IP address and the port. So if you're looking for sockets, combine source IP and source port, as well as destination IP and destination port. answered 19 Apr '16, 03:49  Jasper ♦♦ |
I wondered if the OP was asking about an actual socket instance for the client\server application.
If so, for TCP, each new socket will have to undertake the 3-way handshake, but in UDP for example, there's no clue in a capture file.