יוני תובל a écrit : > hi > i am writing a dissector for a message with a length greater then 1500 > bytes. > therefor i am unable to dissect it . > can anyone explain to me how wireshark reasebling works ? > is it possible to gather all tvb buffers into one big buffer and then > dissect it . > thanks > ------------------------------------------------------------------------ > > ___________________________________________________________________________ > Sent via: Wireshark-dev mailing list <[email protected]> > Archives: http://www.wireshark.org/lists/wireshark-dev > Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev > mailto:[email protected]?subject=unsubscribe Over TCP ? Use tcp_dissect_pdus. See http://www.wireshark.org/docs/wsdg_html_chunked/ChDissectReassemble.html And also README.developper, epan/dissectors/packet-tcp.h & c.
Olivier -- Wireshark Generic Dissector http://wsgd.free.fr ___________________________________________________________________________ Sent via: Wireshark-dev mailing list <[email protected]> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:[email protected]?subject=unsubscribe
