Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-dev: [Wireshark-dev] reassemble packets

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: "Martin Corraine (mcorrain)" <mcorrain@xxxxxxxxx>
Date: Tue, 1 Jul 2008 12:57:34 -0400

Hello,
 
I'm nearly done with Cisco's ged125-protocol dissector. I thank all that have helped me thus far. Right now, I'm trying to reassemble packets under TCP. I've looked at the readme but I'm very confused still. Could anyone explain HOW the wireshark code finds packet #1 (start of the message x) and combines packet #2 and #3 (message continues in these packets) and then sends these as one packet to the dissect function?
 
much thanks,
martin
  • Prev by Date: Re: [Wireshark-dev] enhancement request
  • Next by Date: Re: [Wireshark-dev] Dissector global variable
  • Previous by thread: Re: [Wireshark-dev] enhancement request
  • Next by thread: Re: [Wireshark-dev] Dissector global variable
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation