ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Wireshark-dev: [Wireshark-dev] fragment_add_..(), pinfo->src/dst, IP vs. TCP Session

From: David Aggeler <david_aggeler@xxxxxxxxxx>
Date: Sun, 11 Jul 2010 15:51:50 +0200


Roughly, DICOM has one TCP session for commands and one for data.

Now fragment_add_seq_next() does not seem to keep different TCP sessions apart, and solely looks for pinfo->src/dst, which I think are supposed to represent the IP addresses. But this screws up the reassembly.

Any precondition I missed? Do I need to add a new functions to the reassemble module or somehow seqeeze srcport/dstport into the ID?

David