Greg Sinclair wrote: > Its the <sequence number..> part I need help filling in. Can someone > help me figure out how to do this in a regular dissector function? And > to make matters worse, I'd need the relative sequence number instead of > the absolute sequence number.
There's no guarantee that you have the initial 3-way handshake in a capture, so there's no guarantee that you *can* have the relative sequence number. Currently, I don't think there's any way to get the relative sequence number even if it *is* known, and there's definitely no way to determine whether it's known. _______________________________________________ Wireshark-dev mailing list [email protected] http://www.wireshark.org/mailman/listinfo/wireshark-dev
