Wireshark mailing list archives
reassembling tcp streams to dissect netstrings
From: Toni Ruottu <toni.ruottu () iki fi>
Date: Mon, 14 Feb 2011 12:59:09 +0200
I am writing a plugin to dissect a TCP stream of netstrings. Examples of netstrings would include 5:hello, and 0:, See http://cr.yp.to/proto/netstrings.txt for details. Method tcp_dissect_pdus takes length of the data as a parameter, which is not a problem for the payload part, but how do I reassemble the stream up to the first ":", so I can read the length information? thank you for your time, --Toni ___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
Current thread:
- reassembling tcp streams to dissect netstrings Toni Ruottu (Feb 14)
- Re: reassembling tcp streams to dissect netstrings Sake Blok (Feb 14)