Wireshark mailing list archives
Re: accessing all TVB elements
From: Stephen Fisher <steve () stephen-fisher com>
Date: Thu, 02 Feb 2012 11:46:46 -0700
---- On Wed, 01 Feb 2012 19:24:19 -0700 Andrew Kampjes wrote ----
I have a dissector and I need to load all the TVB elements to be displayed to preform a custom reassembly on them. The dissect_PROTO() function only gets the current TVB that you've clicked on at a time. I need either random access to the other TVB elements during the dissect_PROTO() function or at least sequential access when the file is loaded and the dissector run.
Read doc/README.developer, section 2.7 titled "Reassembly/desegmentation for protocols running atop TCP" if it's a TCP based protocol. There is another, more complicated, reassembly method that can be used with any protocol. Once you reassemble the stream, the TVB from the final packet in the stream will contain all of the payload. ___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
Current thread:
- accessing all TVB elements Andrew Kampjes (Feb 01)
- Re: accessing all TVB elements Stephen Fisher (Feb 02)