Wireshark · Ethereal-dev: Re: [Ethereal-dev] Reassembly & tvb_find_guint8()

[Alex Kirk <alex@xxxxxxxxxxxx>]

Um, did you read my whole message? I'm already well past that point -- hell, I
modeled my call to tcp_dissect_pdus() and the functions it calls after
packet-dns.c. I've got Ethereal to recognize that one packet is a continuation
of a previous PDU, and I appear to have a tvbuff of the appropriate size. The
issue isn't with that, it's with actual disassembly on that tvbuff.

Alex Kirk

> Alex Kirk wrote:
> 
> > The situation is this: my PDU begins with a 4-byte field that gives me its
> > length.
> 
> That means that you can do reassembly using the (unfortunately 
> undocumented) tcp_dissect_pdus() routine.  See, for example, 
> "dissect_dns_tcp()", in epan/dissectors/packet-dns.c.
> 
> _______________________________________________
> Ethereal-dev mailing list
> Ethereal-dev@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-dev
>