Ethereal-dev: Re: [ethereal-dev] Dissector without a name

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Dr.-Ing. Gerrit Gehnen" <G.Gehnen@xxxxxxxx>
Date: Tue, 05 Sep 2000 11:07:23 +0200
Andreas Sikkema wrote:
> It seems a really nice and easy protocol until you get to the evil part.
> One TCP stream can consist of the following messages

Oh, yes. I was blind.... Driven by the avaliable devices  
and their network communications I assumed, that there is a 
one to one relation between TCP-packet and TP0-packet. 
After rereading RFC 1006 my eyes opened. It is a limitation of the 
 of the devices.

> > RFC 1006 doesn't define a name for the protocol.....
> 
> H.323 related protocols call it TPKT!
Citing RFC 1006:
"....Each packet, termed a TPKT, is
viewed as an object composed of an integral number of octets, of
variable length."

Ok, TPKT looks fine for me. But after my enlightment expect some
time delay...or is your TPKT-dissector avaliable for public?

  Gerrit
-- 
Dr.-Ing. Gerrit Gehnen      Abt. LT
ATR Industrie-Elektronik    Textilstraße 2, 41751 Viersen, Germany
Tel. (+49)2162 485-362      Fax (+49)2162 485-100
http://www.atrie.de