Wireshark · Wireshark-dev: Re: [Wireshark-dev] TCP packet reassemble problem

[Natalie Shapira <nd1234@xxxxxxxxx>]

Hi,

Can you describe a little bit more about the way that your dissector knowes how to start?

Have you enter any patch to the wireshark code (besides the plugin) ?

If you want to add source file, I can look at it.

Natalie.

On Tue, May 21, 2013 at 11:59 AM, Hardik Patel <hardik.party@xxxxxxxxx> wrote:

Hello,

I am developing plugin in wireshark, which is working fine for single TCP packet.

My dissector tvb buffer start correctly after tcp checksum at the offset of 0035.

But in case of Reassembled packets, i can see that my tvb buffer for dissector pointing at the start of frame at 0000.

so how can i make my tvb buffer pointing at the end of tcp checksum as it should do.??

because of this problem my dissector wrongly dissecting frame.

Regards,
Hardik Patel

___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe