<html><div style='background-color:'><DIV></DIV>      In spp_stream4.c there're variable ACTIONS for variable TCP state, for example, if the TCP state for the client is SYN_SENT, and then you receive a packet from the server with the flags TH_SYN| TH_ACK, thus the program take an action of ACTION_SET_SERVER_ISN. For most of the ACTIONS I can understand easily. But for this one below I can't understand at all. In this case the TCP state for the client is still SYN_SENT, and then you receive a packet from the server with the flags TH_RST, and then the program take an action of ACTION_FLUSH_CLIENT_STREAM | ACTION_FLUSH_SERVER_STREAM| ACTION_DROP_SESSION. What do the FLUSH STREAM mean? The code for this case is like this:
<P>   if(p->tcph->th_flags & TH_RST)<BR>   {<BR>            /* check to make sure the RST is in window */<BR>            if(CheckRst(ssn, direction, pkt_seq, p))<BR>            {<BR>                     ssn->client.state = CLOSED;<BR>                     ssn->server.state = CLOSED;</P>
<P>                     DEBUG_WRAP(DebugMessage(DEBUG_STREAM,  <BR>                                  "   Client Transition: CLOSED\n");<BR>                     DebugMessage(DEBUG_STREAM,  <BR>                                   "   Server Transision: CLOSED\n"););</P>
<P>                     return ACTION_FLUSH_CLIENT_STREAM | <BR>                               ACTION_FLUSH_SERVER_STREAM | <BR>                               ACTION_DROP_SESSION;<BR>            }<BR>    } </P>
<P>   There're  a lot of FLUSH STREAM cases in spp_stream4.c. Do you know the meaning of that? </P>
<P>    Looking forward to your reply. Thank you in advance!<BR><BR><BR><BR><BR>Best regards</P>
<DIV><FONT color=#6633cc face=Verdana><FONT color=#000033>Daisy</FONT><IMG height=12 src="http://graphics.hotmail.com/emrose.gif" width=12></FONT></DIV>
<DIV></DIV></div><br clear=all><hr>  <a href="http://g.msn.com/8HMOCNCN/2740??PS=">MSN Explorer </a> </html>