Ethereal-dev: Re: [Ethereal-dev] Need pointers on writing dissector with packet reassembly

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: ronnie sahlberg <ronniesahlberg@xxxxxxxxx>
Date: Fri, 10 Dec 2004 23:12:58 +1100
Is your protocol transported atop TCP? if so it is very easy,
grep for how the other dissectors use and call
tcp_dissect_pdus()   for examples on how easy it is.


If it is transported atop some other transport,   grep for the users
of the fucntions in reassemble.c for examples on for example how IP
reassembly is done.


Please note: before TCP reassembly will work, you will need to enable
the master switch in the preferences for TCP.

Please also provide a preference option to enable reassembly (and
leave it as OFF as default) so that those poor sods of us that
regularely work with 1GB+ capture files will not have to listen to out
HDs trash so much.





On Wed, 08 Dec 2004 10:11:23 -0600, Andy Howell
<AndyHowell@xxxxxxxxxxxxx> wrote:
> I'm trying to figure out how to write a dissector that does packet
> re-assembly. I checked the README's and the wiki, but couldn't find
> anything on this. Where should I be looking?
> 
> Thanks,
> 
>         Andy
> 
> _______________________________________________
> Ethereal-dev mailing list
> Ethereal-dev@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-dev
>