Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: [Wireshark-dev] Packet reassembling

From: "Василь Семчишин" <semchyshyn@xxxxxxxxx>
Date: Thu, 18 Dec 2008 17:37:35 +0200
HI all.
I know Wireshark can reassemble packets, and I have found several reassembling strategies, but it seams that none of them is suitable for me.

In my dissect function I'm receiving a buffer that consist of 32 bytes - this is one frame. Each byte of this frame is called timeslot, and enumerated from 0 to 31, e.g timeslot0, timeslot1, ....
Each timeslot can be divided into several sub-channels, for example bits 0 -1 from timeslot0 will be sub-channel1, bits 2-3 will be sub-channel2, and so on, it's like applying bit mask on timeslot(0xC  for sub-channel1, 0x30 for sub-channel2, ...).
To collect data of some sub-channel, we must take certain amount of bits at certain offset from the beginning of the frame, add them to buffer and continue doing this for each frame we have captured.
Fragment disassembling is not applicable here because concatenation of two frames will not be helpful.
Segment fragmentation is also not applicable because here work must be done with bits.

So can someone make some suggestions how to implement reassembling for this protocol?

Thank you.