Wireshark-dev: Re: [Wireshark-dev] Defragmenting non-tcp streams
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: paul@xxxxxxxxxxxxxx
Date: Thu, 7 Jan 2010 05:33:00 -0500
On Thu, Jan 07, 2010 at 02:09:43AM -0800, Guy Harris wrote:
> On Jan 7, 2010, at 1:48 AM, paul@xxxxxxxxxxxxxx wrote:
 
> > TCP has a tcp_dissect_pdus() function that higher protocols can use
> > to  eliminate their dependency on the TCP framing. Is there anything
> > generic for other layers?
 
> I.e., for other byte-stream-oriented layers?

Yes.

> tcp_dissect_pdus()
> resides atop lower-level reassembly code in the TCP dissector; a similar
> lower-level reassembly mechanism exists in the SSL/TLS dissector.  There's
> currently no generic code used by both the TCP and SSL/TLS dissector;
> I have not looked at whether such a generic mechanism could be provided.

Ok, thanks. Looks like I'll have to continue to roll my own then.

Any idea why I might be getting the overlaps?

Paul