Wireshark · Wireshark-dev: Re: [Wireshark-dev] wanted to find frame size

[mmann78@xxxxxxxxxxxx]

Shouldn't tcp_dissect_pdus() being doing the work for you?  You need to specify "minimum length" (which could be the size of your header, but usually it's just up to the "size" field in your header, wherever that may be), and after that the "length" function passed in should tell it how big your packet is.

 

Or is the issue that you don't know the size of your packet, so you can't use tcp_dissect_pdus?

 

-----Original Message-----
From: Hardik Patel <hardik.party@xxxxxxxxx>
To: wireshark-dev <wireshark-dev@xxxxxxxxxxxxx>
Sent: Thu, Jul 25, 2013 9:46 am
Subject: [Wireshark-dev] wanted to find frame size

Hello,

I have created dissector which is failing if TCP reassemble two packet.

Below is an example :

In this case TCP have reassembled two frame 708 and 710.

708 have 7 byte of data which is not my packet header. my packet header start from 0 byte of 710
frame so i need to find method due to which i know if frame is of sufficient length or not.

If i can find length then simple i can put offset of 7 byte so i can start with my header and dissect it.

Regards,
Hardik Patel

___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe