Wireshark-dev: [Wireshark-dev] Request for evolution in TCP dissector
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Pierre JUHEN <pierre.juhen@xxxxxxxxxx>
Date: Mon, 09 Oct 2006 21:53:02 +0200
I would like to use the pdml of tshark to work on a "reassembled"  TCP
layer.

If the packet needs really reassembling, it's ok, and I can use the
"tcp.segment"  fields to get the payload.

But if the applicative PDU is inside only one packet, there is no
tcp.segment.

Would it be possible to get a "tcp.segment" to get the payload, even if
there is only one segment.

Thanks for your advice

Pierre JUHEN