Ethereal-dev: [Ethereal-dev] Dissect a stream

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: "Helge Kruse" <HelgeKruse@xxxxxxxxxxx>
Date: Sun, 27 Feb 2005 15:09:30 +0100

Hello,

 

I have written a dissector for a UDP based protocol. Now I need to write for a TCP based protocol. While I know, that in each packet starts a new packet with datagram protocols like UDP, the TCP messages are packed in a stream. I fear that the messages are not aligned at packet boundaries, even, if the sending process calls a single write for each message.

 

What is the best way to find the start of a new message in a stream?

Is there a dissector, that I can use as a sample?

 

I have read README.Developer, but did not find an answer. Sorry, if this is a FAQ.

 

Regards,

/Helge