Ethereal-dev: Re: [Ethereal-dev] dissecting multiple PDUs per TCP packet

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <gharris@xxxxxxxxx>
Date: Fri, 17 Dec 2004 10:44:24 -0800
Abhijit Menon-Sen wrote:

I'd appreciate it if anyone could point me to an example of dissecting
more than one higher-level PDU contained within one TCP packet.
"get_dns_pdu_len()", "dissect_dns_tcp_pdu()", and "dissect_dns_tcp()" in epan/dissectors/packet-dns.c. If the protocol has a header with a length field at a fixed offset from the beginning of the packet, that's an example of how to handle that. Note that it also handles dissecting higher-level PDUs split across TCP segments; the DNS version has a preference setting to control whether to do that.