Wireshark mailing list archives

Re: TCP Reassembly in wireshark


From: Vishnu Bhatt <vishnu.bhatt () aricent com>
Date: Tue, 11 Feb 2014 11:49:09 +0530

Hello,

<< get_sabp_pdu_len(), that looks at the first few bytes of the message (using a routine to do so for ASN.1 PER)>>

Actually I was asking for some help in this regard only. How does it look at the first few bytes of the message? Where 
the procedure is mentioned (not asking in the code)?

-----Original Message-----
From: wireshark-dev-bounces () wireshark org [mailto:wireshark-dev-bounces () wireshark org] On Behalf Of Guy Harris
Sent: Tuesday, February 11, 2014 2:44 AM
To: Developer support list for Wireshark
Subject: Re: [Wireshark-dev] TCP Reassembly in wireshark


On Feb 9, 2014, at 11:39 PM, Vishnu Bhatt <vishnu.bhatt () aricent com> wrote:

Thanks for the information. So you mean to say that the upper layer tells TCP about its size.

Yes.

Could you please tell me how SABP does this?

It does it by calling tcp_dissect_pdus() in its dissector routine, passing it a get_pdu_len routine, 
get_sabp_pdu_len(), that looks at the first few bytes of the message (using a routine to do so for ASN.1 PER) to 
determine the length.

See Anders's message for details.
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe




===============================================================================
Please refer to http://www.aricent.com/legal/email_disclaimer.html
for important disclosures regarding this electronic communication.
===============================================================================
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe


Current thread: