Adam Shostack wrote:

Gary Howland wrote: | Are you saying UDP protocols don't retransmit un-acked packets? ^^^^^^^^^^^^^ | If not, then you can't be sure the duplicates are TCP.

Err, yes. Thats the point of UDP; its unreliable and has no acknowweldgement.

Sorry, I meant protocols using UDP, not UDP itself. Gary