Wireshark-bugs: [Wireshark-bugs] [Bug 9049] New: Added, in tshark output, timestamps of single T
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Fri, 16 Aug 2013 20:10:35 +0000
Bug ID 9049
Summary Added, in tshark output, timestamps of single TCP chunks ['-z follow,tcp,raw,N']
Classification Unclassified
Product Wireshark
Version SVN
Hardware x86
OS All
Status UNCONFIRMED
Severity Enhancement
Priority Low
Component TShark
Assignee bugzilla-admin@wireshark.org
Reporter ncrdy7wf@tiscali.it
Attachment #11393 Flags review_for_checkin? 

Created attachment 11393 [details]
diff patch to enable timestamping of chunks in tshark's 'tcp follow stream'

Build Information:
SVN 51384
--
I've made this little quick&dirty patch, because I needed tshark to timestamp
all the single chunks of a TCP stream 'aligned'
by the "follow TCP stream" feature called in ui/cli/tap-follow.c
[-> '-z follow,tcp,raw,N'].

I know that it does involve adding an element to the tcp_stream_chunk struct
defined in epan/follow.h though,
and adding a parameter to reassemble_tcp function in epan/follow.h,
epan/follow.c and epan/dissectors/packet-tcp.c
[the only place where this function is used so far], so I dont think it will be
accepted.

I've submitted it anyway, because I think that it is easy to maintain also in
the future, it will be enough to grep the code for
'reassemble_tcp' [hoping that nothing will come to count the elements of
tcp_stream_chunk!].

You are receiving this mail because:
  • You are watching all bug changes.