Wireshark-dev: Re: [Wireshark-dev] TCP Reassembly seems not to be working for me
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Peter Wu <peter@xxxxxxxxxxxxx>
Date: Tue, 5 Nov 2019 11:14:59 +0000
On Wed, Oct 09, 2019 at 06:21:33PM -0700, Richard Sharpe wrote:
> Hi folks.
> 
> I am working on a protocol that needs reassembly.
> 
> I have followed the example in README.dissector and the DNS dissector
> but while I have gotten the length correct (it seems) and that length
> spans multiple TCP segments, reassembly does not seem to be happening.
> 
> I have a cut down capture with three segments that make up 178304
> bytes but my dissector function when called from tcp_dissect_pdus
> seems to always be passed only the first segment of 65551 bytes.
> 
> Does anyone have any hints?

Does your get_pdu_len function return the length including the minimum
header size? Are there any out-of-order TCP segments? You should always
receive the length indicated by get_pdu_len unless there is a bug.
-- 
Kind regards,
Peter Wu
https://lekensteyn.nl