This experiment is very similar to Experiment 12.3. The files /usr/include/inet/tcp.h (Solaris) and /usr/include/netinet/tcp.h (Linux) both contained constants ( eg, TH_FIN) for use in parsing the flags field. Easy modification.

---

This site is maintained by by W. David Laverell of the Computer Science Department at Calvin College.
For assistance or corrections, please contact him at lave@calvin.edu.