Wireshark-dev: Re: [Wireshark-dev] tvb_composite
From: "Yosi Saggi" <yosis@xxxxxxxxxxxxxxxxxxxxx>
Date: Tue, 29 Mar 2011 10:59:47 +0200
reasseble.c is good for fragmented packets, I use it when I have
fragmented packets over a few frames.
I need a solution that composite was supposed to give, in the same
frame. I will explain graphically. 
Let's say this is my buffer for the given frame:
1xxxxxxx
xxxxxxxx
xxx2ooxx
xxxxxxxx
x3ooxxxx
xxxxx4oo
xxxxxxxx

I need a function that will help me get a new buffer (in the same frame,
without touching the original buffer) that will be:
1xxxxxxx
xxxxxxxx
xxx2xxxx
xxxxxxx3
xxxxxxxx
x4xxxxxx
xx

I want to display the original buffer and parse it as usual, I also want
to have the new buffer to be sent to a different dissector that will
take care of the appended data.

Yosi


-----Original Message-----
From: wireshark-dev-bounces@xxxxxxxxxxxxx
[mailto:wireshark-dev-bounces@xxxxxxxxxxxxx] On Behalf Of Jakub Zawadzki
Sent: Monday, March 28, 2011 10:30 PM
To: Developer support list for Wireshark
Subject: Re: [Wireshark-dev] tvb_composite

On Mon, Mar 28, 2011 at 03:49:52PM -0400, Jeff Morriss wrote:
> I've never heard of anyone successfully using composite TVBs so I'm 
> guessing the comment (from 2007) is still accurate.

Not working and unused API for at least 4 years... it means than can be
removed, right? :)

Isn't reassemble.c API good (and working!) replacement for composite
TVBs?

Regards.
________________________________________________________________________
___
Sent via:    Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
 
mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe