There is a fundamental problem: the decoding of TCP is not stateful

[jeffsilverm]

There is a basic problem with the decode_http.py program: the TCP layer is not stateful. There is no concept of a three way handshake, no notion of the connection tear down at the end, no idea that there might be several streams going to the same HTTP port.

To fix the problem, implement a finite state machine which uses the TCP flags, source port and destination port to keep track of the state of the TCP connection. The output of such a state machine would be a series of TCP streams. Since there could theoretically (and practically) be several streams going to the server simultaneously, use threads to keep the streams straight?