reasseble.c is good for fragmented packets, I use it when I have fragmented packets over a few frames. I need a solution that composite was supposed to give, in the same frame. I will explain graphically. Let's say this is my buffer for the given frame: 1xxxxxxx xxxxxxxx xxx2ooxx xxxxxxxx x3ooxxxx xxxxx4oo xxxxxxxx
I need a function that will help me get a new buffer (in the same frame, without touching the original buffer) that will be: 1xxxxxxx xxxxxxxx xxx2xxxx xxxxxxx3 xxxxxxxx x4xxxxxx xx I want to display the original buffer and parse it as usual, I also want to have the new buffer to be sent to a different dissector that will take care of the appended data. Yosi -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Jakub Zawadzki Sent: Monday, March 28, 2011 10:30 PM To: Developer support list for Wireshark Subject: Re: [Wireshark-dev] tvb_composite On Mon, Mar 28, 2011 at 03:49:52PM -0400, Jeff Morriss wrote: > I've never heard of anyone successfully using composite TVBs so I'm > guessing the comment (from 2007) is still accurate. Not working and unused API for at least 4 years... it means than can be removed, right? :) Isn't reassemble.c API good (and working!) replacement for composite TVBs? Regards. ________________________________________________________________________ ___ Sent via: Wireshark-dev mailing list <[email protected]> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:[email protected]?subject=unsubscribe ___________________________________________________________________________ Sent via: Wireshark-dev mailing list <[email protected]> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:[email protected]?subject=unsubscribe
