Wireshark mailing list archives
fragments and reassembly
From: mmann78 () netscape net
Date: Wed, 29 Aug 2012 21:09:19 -0400 (EDT)
It appears that the reassembly API doesn't handle inserting "known middle" fragments (preferring them to be known consecutively). This appears to be at least one of the reasons the SCTP dissector does its own reassembly and why the new Bluetooth dissector from bug 7675 (https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7675) may need to do its own reassembly as well. Am I understanding the reassembly API correctly or am I just not being creative enough to understand how to represent a "known middle" fragment with the current API?
___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
Current thread:
- fragments and reassembly mmann78 (Aug 29)
- Re: fragments and reassembly Mike Morrin (Aug 29)