יוני תובל a écrit :
hi
i am writing a dissector for a message with a length greater then 1500
bytes.
therefor i am unable to dissect it .
can anyone explain to me how wireshark reasebling works ?
is it possible to gather all tvb buffers into one big buffer and then
dissect it .
thanks
------------------------------------------------------------------------
___________________________________________________________________________
Sent via: Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
Archives: http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe
Over TCP ?
Use tcp_dissect_pdus.
See http://www.wireshark.org/docs/wsdg_html_chunked/ChDissectReassemble.html
And also README.developper, epan/dissectors/packet-tcp.h & c.
Olivier
--
Wireshark Generic Dissector http://wsgd.free.fr
