I'm working with python scapy and I had to extract voice data from a file with a U-LIC header. It went fine. I took the payload in which there is IP, TCP and RTP.
I've extracted the TCP-Packets successfully and I've ordered them by TCP.sequence, which makes sense between 2 SYN-packages (FLAGS = SYN), because a SYN-Package creates a new sequence number by chance (pls. correct me if I'm wrong).
So at the end of a data goup (flags = PA, A...), how can I know which SYN-PACKAGE is the next one? I'm asking because all sequence numbers of syncronisation packages are built by chance, or is there a system (next syncronisation sequence number must Always be higher than last one…)?
Thanks and regards