We're now a non-profit! Support open source packet analysis by making a donation.

Wireshark-users: Re: [Wireshark-users] question about WAP protocol data packet

From: Jaap Keuter <jaap.keuter@xxxxxxxxx>
Date: Mon, 17 Sep 2007 20:07:48 +0200

The dissectors simply counts how many sub PDU's were seen.
So it's not read from the packets data, but deferred from the sub PDU lengths.


guyonghao wrote:
inclosure is a picture for the data packet of WAP protocol capturing by ethereal. The situation is that WTP PDU is concatenated, and my question is about the green part. if the "PDU count: 3" stands for, I guess, the number of all sub PDUs, why there is no ASCII indication in corresponding data packet? Could you tell me where "PDU count: 3" is from? How can you parse it from the data packet? Please reply ASAP. Gu