Re: [Wireshark-dev] How to reassemble in dissector plugins if fixed len part is split ?

2008-03-13 Thread John R . Hogerhuis
Guy Harris <[EMAIL PROTECTED]> writes: > > Merlin Hooze wrote: > > > For a disector plugin, if the fixed length part of the message is > > split across tcp segments, can wireshark reassemble it? > > It should be able to do so. If not, that's a bug. (That's why the size > of the fixed-length

Re: [Wireshark-dev] How to reassemble in dissector plugins if fixed len part is split ?

2008-03-11 Thread Martin Peylo
Hi, when I read your mail it came to me that I've read something like this before. Does the following bug describe your problem? Best regards, Martin On 3/11/08, Merlin Hooze <[EMAIL PROTECTED]> wrote: > Hi, > > For a disector plugin,

Re: [Wireshark-dev] How to reassemble in dissector plugins if fixed len part is split ?

2008-03-11 Thread Guy Harris
Merlin Hooze wrote: > For a disector plugin, if the fixed length part of the message is > split across tcp segments, can wireshark reassemble it? It should be able to do so. If not, that's a bug. (That's why the size of the fixed-length part of the message is passed as an argument to tcp_diss

[Wireshark-dev] How to reassemble in dissector plugins if fixed len part is split ?

2008-03-10 Thread Merlin Hooze
Hi, For a disector plugin, if the fixed length part of the message is split across tcp segments, can wireshark reassemble it? Or the plugin needs to take care of it once the tcp_dissect_pdus() functin returns. Any examples available to handle this ? Thanks _