Sounds to me like you've got a snaplen set. Under Capture -> Options, are you limiting each packet to a maximum number of bytes?
________________________________ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Martin Corraine (mcorrain) Sent: Friday, July 11, 2008 9:26 AM To: Developer support list for Wireshark Subject: [Wireshark-dev] truncated packet Hello, I figured out how to drop a plugin into any win32 Wireshark installation. The trick to do this is to use the same complier as the official Wireshark installer was compiled with. I had to switch from VS2005EE to VS6 for it to work on win32. Just thought I throw that out there. Now my question... My dissector use to reassemble packets but for some unknown reason it doesn't now. I'm running out of ideas as to what I may have changed. I get the following message:[ Packet size limited during capture: GED125 truncated]. I'm still using the same capture file too and it worked a few days ago. Could have an update to the Wireshark sources changed the way you reassemble packets under TCP? Any advice will help. tcp_dissect_pdus(tvb, pinfo, tree, ged125_desegment_body, 4, get_ged125_pdu_len, dissect_ged125_base_messages); Thanks, Martin
_______________________________________________ Wireshark-dev mailing list [email protected] https://wireshark.org/mailman/listinfo/wireshark-dev
