Ethereal-dev: Re: [Ethereal-dev] TCP stream over multiple packets dissector

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <gharris@xxxxxxxxx>
Date: Thu, 25 Nov 2004 15:07:30 -0800
alok wrote:

ethereal is a per packet/segment dissector


What do you mean when you say "ethereal is a per packet/segment dissector"?
If you mean "Ethereal only dissects packets one at a time, and can't dissect packets that are split across lower-level packets", then the claim that "ethereal is a per packet/segment dissector" is false - there are many places where Ethereal reassembles packets split across lower-level packets (IP fragmentation, segmentation over TCP, etc., etc.).
tcp_dissect_pdus(), as I've said in several of my replies to you, can be used to handle the "segmentation over TCP" case. Look at packet-dns.c, for example.