Ethereal-dev: Re: [Ethereal-dev] Question about kerberos packets that fragment.
Well I have the reassembly for both ip, and dcerpc
turned on, and I could not see tethereal reassembling
them. Is it suppose to?
I will double check the specific errors, etc.
--- Ronnie Sahlberg <sahlberg@xxxxxxxxxxxxxxxx> wrote:
> You should check if tvb_length_remaining() is large
> enough to contain the
> entire payload that kerberos expects and not print
> an error if the entire
> pdu was not held in the tvb.
>
> Reassembly should be ok with the proper options
> enabled for the following
> transports:
> Transport fragmentation:
> tcp/ip
> udp/ip
> smb
> And also dcerpc fragmentation in the dcerpc layer
> itself:
> dcerpc-fragments
>
> or do you mean that you only get the error when
> reassembly is enabled
> and the dcerpc interface does not expect to see the
> full pdu?
>
>
> ----- Original Message -----
> From: "Jaime Fournier"
> Sent: Sunday, September 29, 2002 10:43 AM
> Subject: [Ethereal-dev] Question about kerberos
> packets that fragment.
>
>
> > I have successfully called kerberos from a
> > subdissector for a dcerpc protocol that wraps krb5
> for
> > rpc usage.
> >
> > The problem I have is when the packet is
> fragmented,
> > either at IP level, or at dcerpc level.
> > They show up with several errors if the
> information
> > extends past that packet.
> > Is there any way to prevent it from printing an
> error?
> > Or a better way to call it so that it reads in the
> > frag?
> >
> > Thanks in advance.
> >
> >
> > =====
> > Jaime Fournier
> >
> > __________________________________________________
> > Do you Yahoo!?
> > New DSL Internet Access from SBC & Yahoo!
> > http://sbc.yahoo.com
> > _______________________________________________
> > Ethereal-dev mailing list
> > Ethereal-dev@xxxxxxxxxxxx
> >
>
http://www.ethereal.com/mailman/listinfo/ethereal-dev
>
> _______________________________________________
> Ethereal-dev mailing list
> Ethereal-dev@xxxxxxxxxxxx
>
http://www.ethereal.com/mailman/listinfo/ethereal-dev
=====
Jaime Fournier
__________________________________________________
Do you Yahoo!?
New DSL Internet Access from SBC & Yahoo!
http://sbc.yahoo.com
