Can't find Socket ID. How can I know that all packets are in the same socket. |
A socket is the combination of the IP address and the port. So if you're looking for sockets, combine source IP and source port, as well as destination IP and destination port. I wondered if the OP was asking about an actual socket instance for the client\server application. If so, for TCP, each new socket will have to undertake the 3-way handshake, but in UDP for example, there's no clue in a capture file.
(19 Apr '16, 04:37)
grahamb ♦
|