khushbu thakkar wrote: > Now my question is if we have have a UDP packet compiling fragmented IP > packets eg: Frame no. 33 of attached file. With the statement > "tvb->ds_tvb" we can get access to parent-level tvb. But for fragmented > and compiled frames as no. 33 this does not work. So for such fragmented > and compiled packets how to get the parent level tvb.
What do you mean by "the parent-level tvb"? If IP reassembly is enabled, the *only* tvbuff handed to the UDP dissector is a tvbuff containing the payload of the reassembled IP datagram. You do not have access to the tvbuffs - plural! - for the IP fragments that were reassembled. What information do you need from the IP layer? _______________________________________________ Wireshark-dev mailing list [email protected] http://www.wireshark.org/mailman/listinfo/wireshark-dev
