Ethereal-dev: [Ethereal-dev] Reassembly and read filter

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: "Olivier Biot" <ethereal@xxxxxxxxxx>
Date: Sun, 4 Jan 2004 21:47:25 +0100
Hi all,

I'm struggling with non-TCP reassembly and read filters, which do not seem
to work together. If I read a WAP capture with the "-R wtp" read filter,
then I never get reassembled WTP, as I always get "Reassembled in: 0".
Additionally, I see that the packets are being pocessed twice, once the
packet has no pinfo->fd->num and then pinfo->fd->num *is* defined.
this does not happen if I don't use a read filter but only a display filter.

It looks like reassembly always requires two passes over the data.

Regards,

Olivier