Ethereal-dev: Re: [Ethereal-dev] Am I insane?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <guy@xxxxxxxxxx>
Date: Thu, 8 Feb 2001 12:37:55 -0800 (PST)
> I'm sending and receiving TCP packets.  But, it seems that the tvbuffs are
> truncating my packet.
> 
> The packet starts out with a length of 168 bytes, but when I do a 
> tvb_length(tvb), it returns 92 bytes.  This is at the top level, before
> any subsets are made.

I.e., you're doing a "tvb_length()" call in, say, "dissect_eth()", that
being "the top level, before any subsets are made"?

If you're doing a "tvb_length()" call in, say, the DIAMETER dissector,
the length will be the length of the captured part of the DIAMETER
payload, i.e.  the length of the captured part of the packet *after the
link-layer, IP, and TCP headers have been stripped off* - because, in
that case, subsets *have* been made by all the dissectors above you.