I would like to use the pdml of tshark to work on a "reassembled" TCP layer.
If the packet needs really reassembling, it's ok, and I can use the "tcp.segment" fields to get the payload. But if the applicative PDU is inside only one packet, there is no tcp.segment. Would it be possible to get a "tcp.segment" to get the payload, even if there is only one segment. Thanks for your advice Pierre JUHEN _______________________________________________ Wireshark-dev mailing list Wireshark-dev@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-dev
