Re: Exporting FTP objects

[Richard Sharpe <realrichardsharpe () gmail com>]

On Tue, Dec 14, 2021 at 10:18 AM Moshe Kaplan <mosheekaplan () gmail com> wrote:
> I considered using such a data structure, but the challenge there is that there's no guarantee of a 'file transfer 
> complete' that could be used to trigger reassembly and adding to the export objects list. AFAIK, it's also not 
> possible to have a function to run after all packets were dissected to generate the export object list entries then.

I am very unfamiliar with the tap infrastructure but perhaps you could
introduce an EOM event through the tap so you could detect the data
connection going down and do reassembly there.

-- 
Regards,
Richard Sharpe
(何以解憂？唯有杜康。--曹操)(传说杜康是酒的发明者)
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe