On Sun, Jun 16, 2002 at 12:28:48PM -0700, Jaime Fournier wrote: > I need to know hdr.frag_num. > I only want to print certain info when the it's the > initial packet, and not a following frag.
What do following fragments contain? I.e., would your dissector be able to do anything other than report "this isn't the first fragment" for following fragments? I suspect that this means that the real way to handle this is to fix the DCE RPC dissector to reassemble fragments and/or call the subdissector only for the first fragment (probably based on a "do reassembly" preference setting, as is the case with other dissectors that do reassembly).
