Ethereal-dev: [Ethereal-dev] dns-over-tcp reassembly problems

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Brian Wellington <bwelling@xxxxxxxxx>
Date: Tue, 2 Apr 2002 13:41:56 -0800 (PST)
Hi.  I see that newer versiopns of Ethereal claim to do proper 
desegmentation of DNS packets split over multiple TCP segments.  I'm not 
sure what I'm doing wrong, but it doesn't seem to work.  I'm using 0.9.3, 
installed from the RPMS on www.ethereal.com.

When getting a response that spans multiple segments (dig for 
huge.foo.xbill.org, if anyone wants to try it) and decoding it, I see
	[Short Frame: DNS]
in the first segment, and
	[Unreassembled Packet: DNS]
in the second (and last).  The 'Desegment all DNS packets' option is 
enabled.  I don't see an obvious way to specify explicitly that these 
segments are part of the same packet and should be decoded as such.

Am I missing something?

Brian