Ethereal-dev: Re: [Ethereal-dev] Packet re-assembly?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <guy@xxxxxxxxxx>
Date: Fri, 2 Nov 2001 18:46:43 -0800 (PST)
> I remember reading a while back that someone had made some TCP changes to
> allow packet reassembly (assuming, of course, that the whole stream is 
> present, like when you have a capture file)

It doesn't require the entire stream, it just requires, for each
higher-level packet (atop TCP), all the TCP segments that contain data
from that packet.

> Was this done?

Yes, Ronnie Sahlberg did that; it's in 0.8.20, and current CVS.

> Does it allow for multiple application layer packets in one 
> tcp packet,

That's independent of whether reassembly is done, but a dissector can do
that and handle segment reassembly as well.

> and for fragments?

Fragments as in IP fragments?  Those are handled by separate reassembly
code, also written by Ronnie.

> If so, is there a dissector I can look at that uses it?

	packet-nbns.c

	packet-oncrpc.c

	packet-dns.c

	packet-iscsi.c