Wireshark mailing list archives
Re: Defragmenting non-tcp streams
From: paul () wsh sbrk co uk
Date: Thu, 7 Jan 2010 05:33:00 -0500
On Thu, Jan 07, 2010 at 02:09:43AM -0800, Guy Harris wrote:
On Jan 7, 2010, at 1:48 AM, paul () wsh sbrk co uk wrote:
TCP has a tcp_dissect_pdus() function that higher protocols can use to eliminate their dependency on the TCP framing. Is there anything generic for other layers?
I.e., for other byte-stream-oriented layers?
Yes.
tcp_dissect_pdus() resides atop lower-level reassembly code in the TCP dissector; a similar lower-level reassembly mechanism exists in the SSL/TLS dissector. There's currently no generic code used by both the TCP and SSL/TLS dissector; I have not looked at whether such a generic mechanism could be provided.
Ok, thanks. Looks like I'll have to continue to roll my own then. Any idea why I might be getting the overlaps? Paul ___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
Current thread:
- Defragmenting non-tcp streams paul (Jan 07)
- Re: Defragmenting non-tcp streams Guy Harris (Jan 07)
- Re: Defragmenting non-tcp streams paul (Jan 07)
- Re: Defragmenting non-tcp streams Guy Harris (Jan 07)
- Re: Defragmenting non-tcp streams paul (Jan 07)
- Re: Defragmenting non-tcp streams Guy Harris (Jan 07)
- Re: Defragmenting non-tcp streams paul (Jan 07)
- Re: Defragmenting non-tcp streams paul (Jan 07)
- Re: Defragmenting non-tcp streams Guy Harris (Jan 07)