Ethereal-dev: Re: [Ethereal-dev] Question

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Wed, 01 Feb 2006 03:41:14 -0800
fabio matturro wrote:

I'd like to collect all the packets containing data (protocol-defined data) and show them in JUST one packet. Is it possible? These packets are not necessarily fragments of a single data packet. In general, is it possible to collect infos (data, most of all) from different packets and show them in a single packet?

It's possible to have a dissector for a particular protocol reassemble data from multiple packets for a lower-level protocol that make up a single packet for the protocol being dissected, and dissect the reassembled packet as part of the dissection of the last packet.

The dissector would have to include code to make it do so.

What are the protocols in question?