Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] [Wireshark-commits] rev 23471:/trunk/epan/dissectors/ /trunk

From: Jeff Morriss <jeff.morriss.ws@xxxxxxxxx>
Date: Mon, 19 Nov 2007 10:50:02 -0500


Michael Tuexen wrote:
On Nov 16, 2007, at 11:04 PM, morriss@xxxxxxxxxxxxx wrote:
(One could rightfully argue that you should only see a fragmented chunk bundled with another chunk when retransmitting but, well, I'm staring at traces of an implementation--to remain nameless to protect the guilty--which is sometimes fragmenting and then bundling the fragments into one packet.)
That is completely valid... Implementations are free to fragment user
data and bundle the fragments in one packet. There are even conditions where
this is required behaviour.

Hmmm, like when (besides retransmission)?  It certainly is ugly to look at.

BTW, I also mean to check if the SCTP dissector should be catching exceptions whenever calling a subdissector. What I fixed above was causing me massive confusion because the peer was SACKing TSNs I couldn't see in the trace (because M3UA exception'd out). Of course exceptions may occur for other reasons and we should never forgot to display all the DATA chunks.