Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] Troubles With Reassembly

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Wed, 22 Apr 2009 15:15:24 -0700

On Apr 22, 2009, at 3:03 PM, gogrady@xxxxxxxxx wrote:


---- Guy Harris <guy@xxxxxxxxxxxx> wrote:

Is the idea that, if you have a sequence of, for example:

	BNP header+multimessage begin
	BNP header+multimessage middle 1
	BNP header+multimessage middle 2
	BNP header+multimessage end

you would strip off all the BNP headers, concatenate the four BNP data
chunks in order (begin, middle 1, middle 2, and end, in that order),
and then dissect the concatenated chunk as a single message?

close, take all of the beginning, including bnp as bnp is stripped in
dissector function, and strip the bnp from the middle and end and concatenate
them onto the end of the beginning.

I.e, the sequence of:

	BNP header 1+multimessage begin
	BNP header 2+multimessage middle 1
	BNP header 3+multimessage middle 2
	BNP header 4+multimessage end

turns into

BNP header 1+BNP header 2+BNP header 3+BNP header 4+multimessage begin +multimesssage middle 1+multimessage middle 2+multimessage end

?