Ethereal-dev: Re: [Ethereal-dev] How to access value of hdr.frag_len from subdissector?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <gharris@xxxxxxxxx>
Date: Sun, 16 Jun 2002 12:48:46 -0700
On Sun, Jun 16, 2002 at 12:28:48PM -0700, Jaime Fournier wrote:
> I need to know hdr.frag_num.
> I only want to print certain info when the it's the
> initial packet, and not a following frag.

What do following fragments contain?

I.e., would your dissector be able to do anything other than report
"this isn't the first fragment" for following fragments?

I suspect that this means that the real way to handle this is to fix the
DCE RPC dissector to reassemble fragments and/or call the subdissector
only for the first fragment (probably based on a "do reassembly"
preference setting, as is the case with other dissectors that do
reassembly).