Wireshark mailing list archives
Capture TCP reassembled protocol
From: fab12 () freesurf fr
Date: Wed, 29 Feb 2012 16:44:57 +0100
Hello Is it correct to assume that if my dissector use the tcp_dissect_pdus to reassemble my protocol, I have to start the capture before the TCP connection is established? I'm thinking that if I start the capture after the TCP reassembly module will call my getlength function with the first "TCP segment" it receives for my connection which my not correspond with an actual beginning of one of the protocol message (or maybe for that reason it will never call the getlength function). But I never noticed this problem before so I guess I'm missing something... Best regards Fabien ___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
Current thread:
- Capture TCP reassembled protocol fab12 (Feb 29)