Wireshark · Wireshark-dev: Re: [Wireshark-dev] Some more question on TCP desegmentation

[Anders Broman <a.broman@xxxxxxxxx>]

Kaul skrev 2010-12-01 07:40:

On Wed, Dec 1, 2010 at 8:22 AM, Andreas <AndreasSander1@xxxxxxx> wrote:

Am 30.11.2010 13:05, schrieb Kaul:

> 1. If only some of the segments (say, first 50 out of 70), will I get that
> partial PDU, or just the original TVB (the first packet, essentially)?

Don't know what you ask for. But when you call tcp_dissect_pdus(), you
pdu_dissect function will get a fresh new TVB with that part.

Which part exactly? A new tvb in the length of the original TVB, or in the length of as-much-PDU-as-it-could-fetch?
Y.
 

--
Andy

I pretty sure you won't get any thing unless the reassembly is successful e.g all segments found.
Regards
Anders

___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
            mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe

___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe