Wireshark mailing list archives

Re: Accessing TCP headers from dissector


From: Guy Harris <guy () alum mit edu>
Date: Sat, 20 Aug 2011 11:11:27 -0700


On Aug 20, 2011, at 2:56 AM, Brian White wrote:

I am writing a dissector (my first try) and I would like to get at the underlying TCP header of each packet I dissect 
(specifically the acknowledgement number).

In what way would your dissector use this information?  Implementations of the protocol your dissector is dissecting 
cannot, on most if not all OSes, see the ack number, as TCP just presents to protocol implementations running atop it a 
sequenced data stream, with no TCP segment boundaries or sequence or acknowledgment numbers visible.
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe


Current thread: