Wireshark · Wireshark-dev: Re: [Wireshark-dev] reasebling packets - dissector question

[יוני תובל <yoni6666@xxxxxxxxx>]

i tried to return the entire message length . still fails .

(it only succeeds when the tvb consists of the entire message )

What about he offest value we pass to the get_len method .

to which offset doest it refer to ? 

 tcp_dissect_pdus()  obviously uses this offset .

 

 

 

2009/2/23 Guy Harris <guy@xxxxxxxxxxxx>

On Feb 23, 2009, at 12:42 AM, יוני תובל wrote:
> my dissection code is
>
> static guint get_message_len(packet_info *pinfo, tvbuff_t *tvb, int
> offset)//a
>
> {
>
>     return 3;           // the value from the header that represents
> the length of the data coming after the header

No - as I said in my message, it should return the length of the
*entire PDU*, which includes the header *and* the data.

___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
            mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe