Wireshark · Ethereal-dev: [Ethereal-dev] Need help with protocol that spans multiple TVBs

[Herbert Falk <herb@xxxxxxxxxxxx>]

I have attached an image that shows my particular problem.  The square 
shows that the MMS PDU spans three(3) TVBs.  I have re-assembly turned 
on at TCP, TPKT, and COTP.  When the MMS dissector is called, the 
function is only given the MMS information in the first packet.

MMS uses Session and Presentation on-top of COTP.

I have tried most of the normal tricks, but need to make one large TVB 
(containing all data for MMS or Presentation) so that it can parse properly.

Any help would be greatly appreciated.

--
Herbert Falk
SISCO
6605 19-1/2 Mile Road
Sterling Heights, MI 48314
Ph: 586-254-0020
Fx:  586-254-0053

NOTICE: This communication may contain privileged or other confidential
information. If you are not the intended recipient, or believe that you
have  received this communication in error, please do not print, copy,
retransmit,  disseminate, or otherwise use the information. Also, please indicate to
the sender that you have received this communication in error, and delete the
copy you received. Thank you.