Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-dev: Re: [Wireshark-dev] Conversation and TCP reassembly

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: "Jens Steinhauser" <jens.steinhauser@xxxxxxxxxx>
Date: Fri, 1 Aug 2008 16:39:29 +0200

Ok, I rewrote the code to reuse a conversation that already exists. Works fine now.

The example in 2.2.3 in README.developer gave me the illusion that is's no problem have/create multiple conversations.

Thanks for your help!

> -----Original Message-----
> From: wireshark-dev-bounces@xxxxxxxxxxxxx 
> [mailto:wireshark-dev-bounces@xxxxxxxxxxxxx] On Behalf Of didier
> Sent: Friday, 01. August 2008 11:20
> To: Developer support list for Wireshark
> Subject: Re: [Wireshark-dev] Conversation and TCP reassembly
> 
> 
> Hi,
> 
> Le vendredi 01 août 2008 à 10:52 +0200, Jens Steinhauser a écrit :
> > I do the following to create only one conversation per 
> "Configuration
> > Frame":
> > 
> >   if (config_frame && !pinfo->fd->flags.visited) {
> >     data = extract_data(...);
> >     conversation = conversation_new(...);
> >     conversation_add_proto_data(conversation, proto_handle, data);
> >   }
> You must use find_conversation() first because TCP has already created
> one for reassembling.
> 
> Didier
> 
> 
> _______________________________________________
> Wireshark-dev mailing list
> Wireshark-dev@xxxxxxxxxxxxx
> https://wireshark.org/mailman/listinfo/wireshark-dev
> 

  • References:
    • Re: [Wireshark-dev] Conversation and TCP reassembly
      • From: didier
  • Prev by Date: Re: [Wireshark-dev] help needed regarding decrypting the ssl
  • Next by Date: [Wireshark-dev] buildbot failure in Wireshark (development) on OSX-10.5-x86
  • Previous by thread: Re: [Wireshark-dev] Conversation and TCP reassembly
  • Next by thread: [Wireshark-dev] Fw: help needed regarding decrypting the ssl
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation