Sniffing HTTP traffic

Jeremy jepri at
Thu Apr 4 21:51:59 EST 2002

On 2002.04.04 20:05 Arabella Riu wrote:
> Hallo everybody!
> I need to detect when a connection is interrupted with the Stop Botton
> of Netscape.
> I tried to observe the output of tcpdump but is really inpossible to
> distinguish between the packets that are consequence of the
> interruption
> of a connection and the normal packets for a terminated connection.
> Sombody could help me?

If the connection is stopped after the headers are sent you can compare 
the Content-Length: header with the transmitted bytes.  If it's stopped 
before the headers, then that's a real give-away.

More information about the linux mailing list