Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-dev: Re: [Wireshark-dev] Conversation and TCP reassembly

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: didier <dgautheron@xxxxxxxx>
Date: Fri, 01 Aug 2008 11:20:12 +0200

Hi,

Le vendredi 01 août 2008 à 10:52 +0200, Jens Steinhauser a écrit :
> I do the following to create only one conversation per "Configuration
> Frame":
> 
>   if (config_frame && !pinfo->fd->flags.visited) {
>     data = extract_data(...);
>     conversation = conversation_new(...);
>     conversation_add_proto_data(conversation, proto_handle, data);
>   }
You must use find_conversation() first because TCP has already created
one for reassembling.

Didier



  • Follow-Ups:
    • Re: [Wireshark-dev] Conversation and TCP reassembly
      • From: Jens Steinhauser
  • References:
    • Re: [Wireshark-dev] Conversation and TCP reassembly
      • From: Jens Steinhauser
  • Prev by Date: Re: [Wireshark-dev] Conversation and TCP reassembly
  • Next by Date: [Wireshark-dev] Fw: help needed regarding decrypting the ssl
  • Previous by thread: Re: [Wireshark-dev] Conversation and TCP reassembly
  • Next by thread: Re: [Wireshark-dev] Conversation and TCP reassembly
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation