Wireshark · Ethereal-dev: Re: [Ethereal-dev] Desegmentation atop TCP problem / TCP reassembly and desegment_offset = 0

[Peter Johansson <Peter.xc.Johansson@xxxxxxxxxxxx>]

Jeff Foster wrote:

> This will work for a fixed length PDU, which does seem to be Peter's 
> situation, or a PDU with a length value in the start of the PDU.
This is exactly my situation.

---8<--- snip snip ---8<---

> > From: Ronnie Sahlberg
> > Sent: Wednesday, September 01, 2004 4:14 AM
---8<--- snip snip ---8<---

> > remember to enable BOTH the tcp preference as well as your own
> > preference for your protocol to enable desegmentation.
Yes, thank you. I tracked this down myself a few hours ago (reading the 
source code). Enabling "Allow subdissector to reassemble TCP streams" in 
the preferences for TCP made my life a whole lot easier. I would really 
have liked to see something about this in the README.developer. It would 
sure help others in the future.
I would like to see additional notes in the README.developer, section 
2.7, showing the use of "pinfo->can_desegment". It seems rather vital 
after having read through a bunch of other dissector sources.

Currently I am instead receiving too much data in the reassembled 
packets. But I guess that is a problem with my code. I will try and hunt 
it down myself...

Thanks for your replies!

/ Peter