Re: Extending time before 2nd analysis pass

[Guy Harris <guy () alum mit edu>]

On Apr 26, 2019, at 3:02 AM, Darien Spencer <cusneud () mail com> wrote:

> I wrote a custom C dissector involving my own re-assembly logic.
> The problem I'm dealing with is:
> When capturing from high-capacity interfaces sometimes the segments to re-assemble arrive out of order

Do they arrive out of order at the protocol implementation as well?

If so, presumably the reassembly process in the protocol implementation knows when it's ready to provide reassembled 
data to its client; the reassembly code for the Wireshark dissector should do the same thing.
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe