On Dec 07, "Jim Janovich" wrote: > I was wondering if there is an easy watch to match a Send and a receive > Flow. > > I was looking at the data returned and could not think of a way. Any > thoughts?
Do you mean finding a response flow? You should be able to see that the ephemeral port on the client will be the destination port for the server's response, if that makes sense. 128.32.11.22:33212 -> 64.236.16.52:80 64.236.16.52:80 -> 128.32.11.22:33212 Also, this post may help: http://mailman.splintered.net/pipermail/flow-tools/2004-September/002343.html _______________________________________________ Flow-tools mailing list [EMAIL PROTECTED] http://mailman.splintered.net/mailman/listinfo/flow-tools
