Ethereal-users: Re: [Ethereal-users] Unreassembled packet with 0.9.3, but not with 0.9.0

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <guy@xxxxxxxxxx>
Date: Mon, 13 May 2002 14:47:58 -0700
On Mon, May 13, 2002 at 02:07:20PM -0700, Guy Harris wrote:
> The heuristic can probably be tightened, given that the length in the
> TPKT header includes the length of the TPKT header itself, so it has an
> absolute minimum value of 4 and, as the protocols running atop TPKT have
> their own minimum PDU lengths, it can probably be boosted above that.

I've checked in a change to do that, which will appear in the next
release.

"is_tpkt()" now takes an argument whose value is the minimum length of
the TPKT payload for the protocol whose dissector is calling
"is_tpkt()", and the Q.931 dissector now passes a value of 3.

This may require the H.323 dissector plugin to be updated.