Wireshark mailing list archives

reassembling tcp streams to dissect netstrings


From: Toni Ruottu <toni.ruottu () iki fi>
Date: Mon, 14 Feb 2011 12:59:09 +0200

I am writing a plugin to dissect a TCP stream of netstrings. Examples
of netstrings would include 5:hello, and 0:, See
http://cr.yp.to/proto/netstrings.txt for details. Method
tcp_dissect_pdus takes length of the data as a parameter, which is not
a problem for the payload part, but how do I reassemble the stream up
to the first ":", so I can read the length information?

  thank you for your time, --Toni
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe


Current thread: