Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] UDP desegmentation - how to?

From: Sake Blok <sake@xxxxxxxxxx>
Date: Wed, 22 Dec 2010 11:49:38 +0100
On 22 dec 2010, at 09:58, Kaul wrote:

> Can I use something like tcp_dissect_pdus() for UDP packets? Specifically, Kerberos over UDP - I think we can get the PDU length from the packet and get a complete PDU.

As the UDP header is missing a sequence number, it is not possible to do UDP reassembly at the UDP layer. It needs to be done at a higher layer where the order of fragments can be determined.

Cheers,


Sake