Ethereal-dev: Re: [Ethereal-dev] COPS-PR extension patch for packet-cops.c

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Fri, 22 Feb 2002 03:19:28 -0800
On Fri, Feb 22, 2002 at 11:45:50AM +0200, Kari Tiirikainen wrote:
> Here is my COPS-PR extension (as defined in RFC 3084) patch for 
> packet-cops.c. It's a diff relative to packet-cops.c,v 1.17 2002/01/24

Checked in (although I had to apply some of the changes by hand, as the
the current version, as of when I checked it in, was 1.18).

> I also attached a recording of COPS-PR traffic. Unfortunately the first 
> COPS request is so big (over 7 KB)  that it gets fragmented and I haven't 
> figured out how to prevent that yet.

You don't prevent it, you make the dissector handle it.

Ethereal supports reassembling packets that require more than one TCP
segment; I've added code to the COPS dissector to handle that.  The
current CVS dissector reassembles that request and displays it in frame
12.  You have to enable the "Allow subdissector to desegment TCP
streams" TCP preference, as that's off by default; there's also an
option to enable desegmentation of COPS (both options have to be
enabled), but that's on by default.