I am writing a VNC packet dissector for Wireshark and have a few questions about the VNC RFB protocol. I'm referring to http://www.realvnc.com/docs/rfbproto.pdf to develop this code and am about 3/4 of the way through.
My first question is about the Server Framebuffer Update message. Can it span multiple packets? All of the other types stay within one packet. However, when my dissector comes across Server Framebufer Updates, the first is malformed (I'm expecting more bytes than are present) and the next few packets (or more) do not start with the standard message type field at the top, which makes me think that they're a continuation of the previous packet. Thanks, Steve _______________________________________________ VNC-List mailing list [email protected] To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list
