Steve Grinwis wrote: > First of all I am using the TCP_dissect_pdu’s function, and it works > great if there are multiple TCP packets in the same pdu. However if it > goes the other way, and there are multiple PDU’s in the same tcp packet, > the dissect_pdu’s will pull the length out of the first pdu, and then > attempt to reapply that length over and over again in the same TCP > packet. Hilarity (a.k.a chaos) ensues. Am I using the function > incorrectly?
Probably. It works fine in that case with other dissectors. The length is fetched by calling back to the "get PDU length" routine; that routine is passed a pointer to a tvbuff *and* an offset in that tvbuff, and the offset is the offset within that tvbuff of the beginning of the PDU. If your "get PDU length" routine is fetching the length from the *beginning* of the tvbuff it's handed, it's incorrect. It should fetch the length starting at the offset it's handed. _______________________________________________ Wireshark-dev mailing list [email protected] http://www.wireshark.org/mailman/listinfo/wireshark-dev
