Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] TCP Reassembly in wireshark

From: Vishnu Bhatt <vishnu.bhatt@xxxxxxxxxxx>
Date: Tue, 11 Feb 2014 11:49:09 +0530
Hello,

<< get_sabp_pdu_len(), that looks at the first few bytes of the message (using a routine to do so for ASN.1 PER)>>

Actually I was asking for some help in this regard only. How does it look at the first few bytes of the message? Where the procedure is mentioned (not asking in the code)?

-----Original Message-----
From: wireshark-dev-bounces@xxxxxxxxxxxxx [mailto:wireshark-dev-bounces@xxxxxxxxxxxxx] On Behalf Of Guy Harris
Sent: Tuesday, February 11, 2014 2:44 AM
To: Developer support list for Wireshark
Subject: Re: [Wireshark-dev] TCP Reassembly in wireshark


On Feb 9, 2014, at 11:39 PM, Vishnu Bhatt <vishnu.bhatt@xxxxxxxxxxx> wrote:

> Thanks for the information. So you mean to say that the upper layer tells TCP about its size.

Yes.

> Could you please tell me how SABP does this?

It does it by calling tcp_dissect_pdus() in its dissector routine, passing it a get_pdu_len routine, get_sabp_pdu_len(), that looks at the first few bytes of the message (using a routine to do so for ASN.1 PER) to determine the length.

See Anders's message for details.
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe




===============================================================================
Please refer to http://www.aricent.com/legal/email_disclaimer.html
for important disclosures regarding this electronic communication.
===============================================================================