Ethereal-dev: Re: [Ethereal-dev] COL_INFO for andX commands

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Ronnie Sahlberg" <sahlberg@xxxxxxxxxxxxxxxx>
Date: Tue, 23 Jul 2002 07:00:20 +1000
I am referring to when TCP retransmission occurs it will in general collaps
and retransmit
not just the potentially small lost segment but a fullsize segment.

This retransmission will collaps multiple small RPC/NFS pdu's into one TCP
segment
regardless if they were sent in separate small segments or not.

Yes, it will happen for NBSS as well.  It will happen for everything running
ontop of
TCP since it is a property of TCP.

It might be difficult to handle for the NBSS layer though since we dont get
(and dont want to get?) information
to the SMB dissector of what is happening down in the NBSS dissector.

----- Original Message -----
From: "Guy Harris"
Sent: Tuesday, July 23, 2002 6:06 AM
Subject: Re: [Ethereal-dev] COL_INFO for andX commands


> On Tue, Jul 23, 2002 at 05:54:30AM +1000, Ronnie Sahlberg wrote:
> > The same problem also exists in the ONC-RPC dissector.
>
> There's no "andX" in ONC RPC (although there are COMPOUND operations in
> NFSv4); are you referring to having multiple ONC RPC requests or
> responses in a single TCP segment?  If so, that exists for NBSS as well,
> so if you're concerned about that, there are *two* layers where it can
> happen for CIFS.