Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] TCP packets reassemble mechanism

From: Stephen Fisher <stephentfisher@xxxxxxxxx>
Date: Tue, 16 Jan 2007 12:32:51 -0800
On Tue, Jan 16, 2007 at 05:35:50PM +0200, sharon lin wrote:

> I would like to understand the TCP reassemble mechanism. If I 
> configured it to work on top of TCP protocol from the "preferences" 
> dialog do I guaranteed to get reassembled (Full) packets to my 
> packet-dissector module.

Did you enable reassembly in the TCP dissector preferences or for a 
protocol that rides on top of TCP?  Wireshark's TCP reassembly functions 
require the dissector to ask for reassembly of 'x' number of bytes (or 
"the next segment" or "until FIN").


Steve