Re: Questions about New Export Objects

[Guy Harris <guy () alum mit edu>]

On Apr 26, 2013, at 7:41 PM, zzl  <greoge_007 () 126 com> wrote:

> I mean the wireshark now can only  export objects embedded in one packet(http,smb,dicom packet)

No.  Wireshark can reassemble multiple TCP segments into an HTTP request or response.

> I want to know whether this extension also just need to export objects from one ftp/smtp packet, or I need to export 
> an object that split in several ftp/smtp packets.

If an object takes more than one TCP segment, the extension should reassemble the object from those segments and export 
it.
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe