commence paridhi bansal quotation: > Is it possible to make out that a particular TCP > packet is a part of an ongoing connection using values > in TCP header?? A TCP connection is, as far as I know, uniquely identified by the IP addresses and port numbers of the endpoints. The port numbers are in the TCP header and the addresses are in the IP header; these headers will be present in every packet that is part of that connection. -- / | [|] Sean Neakums | Questions are a burden to others; [|] <sneakums@zork.net> | answers a prison for oneself. \ | -- Kernelnewbies: Help each other learn about the Linux kernel. Archive: http://mail.nl.linux.org/kernelnewbies/ FAQ: http://kernelnewbies.org/faq/