On Tue, Jan 16, 2007 at 05:35:50PM +0200, sharon lin wrote: > I would like to understand the TCP reassemble mechanism. If I > configured it to work on top of TCP protocol from the "preferences" > dialog do I guaranteed to get reassembled (Full) packets to my > packet-dissector module.
Did you enable reassembly in the TCP dissector preferences or for a protocol that rides on top of TCP? Wireshark's TCP reassembly functions require the dissector to ask for reassembly of 'x' number of bytes (or "the next segment" or "until FIN"). Steve _______________________________________________ Wireshark-dev mailing list Wireshark-dev@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-dev
