Wireshark-dev: Re: [Wireshark-dev] TCP packet reassemble problem
From: Natalie Shapira <[email protected]>
Date: Tue, 21 May 2013 15:03:43 +0200

Can you describe a little bit more about the way that your dissector knowes how to start?
Have you enter any patch to the wireshark code (besides the plugin) ?
If you want to add source file, I can look at it.


On Tue, May 21, 2013 at 11:59 AM, Hardik Patel <[email protected]> wrote:

I am developing plugin in wireshark, which is working fine for single TCP packet.

My dissector tvb buffer start correctly after tcp checksum at the offset of 0035.

But in case of Reassembled packets, i can see that my tvb buffer for dissector pointing at the start of frame at 0000.

so how can i make my tvb buffer pointing at the end of tcp checksum as it should do.??

because of this problem my dissector wrongly dissecting frame.

Hardik Patel

Sent via:    Wireshark-dev mailing list <[email protected]>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:[email protected]?subject=unsubscribe