Hi there,

  In my scripts I need to validate source and destination IP address from the packets I am getting on my machine. How can i check that.....?

For example:

I initiate a ftp session to linux box which in turn sends me ack for the request sent. Now I want to know the source and destination IP address from that ACK packet. How can i check that?

Thanks in advance.


The standard socket API that's provided in Tcl works at a higher level that your computer's network interface. From reading your question, I think that you want to analyse all network packets received by your system,  whether or not they're addressed to that system, and to do this you need some drivers at a lower level.  I haven't come across any in Tcl, but I have come across snoop and snort;  Snort is open source (see http://www.snort.org) and we ran it for sometime on our internal firewall;  you many find that there are elements of the source code that you can learn from, or you may find that using Snort to feed Expect offers you a possible solution.

---