Wireshark-dev: [Wireshark-dev] Packet Reassembly..
From: "Arun Kaliraja B." <[email protected]>
Date: Sat, 28 Jun 2008 18:30:10 +0530
I am currently working with a protocol that needs reassembly of packets.. I am encountering a situation in which the current packet/TVB contains the end fragment of the PREVIOUS SDU (for which reassembly is already ongoing), and starting fragment of the NEXT SDU.
 
I tried using "fragment_add_seq_next" and "fragment_add_multiple_ok"  API's to reassemble the tvb's.
But i dont see the reassembly tree (reassembled PREVIOS SDU) in that packet in that protocol layer.
I see only the "Reassembled in" link for the NEXT SDU fragment present in the current packet/tvb..
 
Does Wireshark reassembly APIs supports implementation of such a scenario ?
Which APIs can be used to implement this scenario??
 
When i call the process_reassembled_data() API for the PREVIOUS SDU the condition (pinfo->fd->num == fd_head->reassembled_in) is failing.. What is the possible reason that this condition is failing??
 
 
 


"DISCLAIMER: This message is proprietary to Aricent and is intended solely for the use of the individual to whom it is addressed. It may contain privileged or confidential information and should not be circulated or used for any purpose other than for what it is intended. If you have received this message in error,please notify the originator immediately. If you are not the intended recipient, you are notified that you are strictly prohibited from using, copying, altering, or disclosing the contents of this message. Aricent accepts no responsibility forloss or damage arising from the use of the information transmitted by this email including damage from virus."