Hello, first of all congratulations to the excellent work on Ethereal. I just tested it on some OSI via TCP communication using RFC1006. Apparently the TPKT (RFC1006) module does not do TCP packet re-assembly, but decodes each TCP frame starting with the RFC1006 header. Is there anyone already working on this issue ? If not, are there examples from other protocols on how to do TCP re-assembly in Ethereal in general ? I am also interested in OSI upper layers (Session, Presentation and ACSE). Anyone working on that ? Or can point out some sources of information on this beside the standard documents ?
Best regards, Georg Hellack
