Wireshark mailing list archives

Re: TCP packet reassemble problem


From: Natalie Shapira <nd1234 () gmail com>
Date: Tue, 21 May 2013 15:03:43 +0200

Hi,

Can you describe a little bit more about the way that your dissector knowes
how to start?
Have you enter any patch to the wireshark code (besides the plugin) ?
If you want to add source file, I can look at it.

Natalie.


On Tue, May 21, 2013 at 11:59 AM, Hardik Patel <hardik.party () gmail com>wrote:

Hello,

I am developing plugin in wireshark, which is working fine for single TCP
packet.

My dissector tvb buffer start correctly after tcp checksum at the offset
of 0035.

But in case of Reassembled packets, i can see that my tvb buffer for
dissector pointing at the start of frame at 0000.


so how can i make my tvb buffer pointing at the end of tcp checksum as it
should do.??

because of this problem my dissector wrongly dissecting frame.



Regards,
Hardik Patel

___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org
?subject=unsubscribe

___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe

Current thread: