Wireshark · Wireshark-dev: Re: [Wireshark-dev] reasebling packets - dissector question

[Guy Harris <guy@xxxxxxxxxxxx>]

On Feb 23, 2009, at 12:42 AM, יוני תובל wrote:
> my dissection code is
>
> static guint get_message_len(packet_info *pinfo, tvbuff_t *tvb, int  
> offset)//a
>
> {
>
>     return 3;           // the value from the header that represents  
> the length of the data coming after the header

No - as I said in my message, it should return the length of the  
*entire PDU*, which includes the header *and* the data.