Wireshark mailing list archives

Re: TCP Reassembly seems not to be working for me


From: Peter Wu <peter () lekensteyn nl>
Date: Tue, 5 Nov 2019 11:14:59 +0000

On Wed, Oct 09, 2019 at 06:21:33PM -0700, Richard Sharpe wrote:
Hi folks.

I am working on a protocol that needs reassembly.

I have followed the example in README.dissector and the DNS dissector
but while I have gotten the length correct (it seems) and that length
spans multiple TCP segments, reassembly does not seem to be happening.

I have a cut down capture with three segments that make up 178304
bytes but my dissector function when called from tcp_dissect_pdus
seems to always be passed only the first segment of 65551 bytes.

Does anyone have any hints?

Does your get_pdu_len function return the length including the minimum
header size? Are there any out-of-order TCP segments? You should always
receive the length indicated by get_pdu_len unless there is a bug.
-- 
Kind regards,
Peter Wu
https://lekensteyn.nl
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe

Current thread: