Wireshark · Wireshark-dev: Re: [Wireshark-dev] Need help on Reassembly and building ethereal on windows.

["ronnie sahlberg" <ronniesahlberg@xxxxxxxxx>]

Yes.   The current tcp reassembly code is rewritten and it has also
fixed the issue you mention.

(When fixing that issue, it also uncovered a bug with HTTP reassembly
that was also fixed recently)


Please use the latest SVN version of wireshark sources.


On 11/15/06, Anders Broman <a.broman@xxxxxxxxx> wrote:
> Hi,
> The TCP reassembly code has been re-written since 0.10.8
> Especially addressing the problem you are seeing I think.
> The GTP dissector has also been updated.
> As Jaap noted use the latest SVN version.
>
> On http://wiki.wireshark.org there are some instructions on how
> To build with Cygwin.
>
> BR
> Anders
>
> -----Ursprungligt meddelande-----
> Från: wireshark-dev-bounces@xxxxxxxxxxxxx
> [mailto:wireshark-dev-bounces@xxxxxxxxxxxxx] För Jaap Keuter
> Skickat: den 14 november 2006 21:16
> Till: Developer support list for Wireshark
> Ämne: Re: [Wireshark-dev] Need help on Reassembly and building ethereal on
> windows.
>
> Hi,
>
> Two remarks:
> 1. Why use such ancient source code?
> 2. Detailed development instruction can be found in the Developer Guide
>    found on the website www.wireshark.org
>
> Thanx,
> Jaap
>
> On Tue, 14 Nov 2006, Annie Misha wrote:
>
> > Hi all,
> >    We have added E-GCDR parsing support for GTP' protocol into Ethereal.
> The code addition has been made in the file packet-gtp.c. We are facing two
> issues here.
> >
> >   1. Packet reassembly:
> >    Our code works fine when we have a Single GTP' PDU which starts in the
> beginning of the TCP segment and ends in the same segment.
> >
> >      When we have a PDU that is segmented and spanning multiple TCP
> segments, the PDU is not assembled and parsed completely. The code parses
> only the first segment and gives a Malformed packet error. A GTP' PDU can
> begin anywhere in a TCP segment. There can be more that one GTP' PDU (Data
> record request) or only a portion of one in a single segment. But here, when
> a GTP PDU starts in the middle of the TCP segment then ethereal does not
> recognize this. It would be great help if you can throw some light on this
> and your valuable suggestions to resolve the issue.
> >
> >
> >   (We have tried using the tcp_dissect_pdus function - but this solves
> only one half of the issue. That is on using this, if a GTP' request starts
> in the beginning of the TCP segment and spans 1 and half segment, the code
> parses the complete request by combining the first and half of second
> segment. However it fails to identify the next GTP' request which is present
> in the next half of the second segment.)
> >
> >   (Please note we have identified this issue by building an exe in Linux)
> >
> > 2. Building Ethereal on  Windows:
> >   --------------------------------------------------
> >       We are trying to build Ethereal exe for windows using cygwin
> (including our code changes). When we execute the ./configure command for
> this, we get the following error:
> >
> > checking for GTK+ - version >= 2.0.0... no
> > *** Could not run GTK+ test program, checking why...
> > *** The test program failed to compile or link. See the file config.log
> for the
> > *** exact error that occured. This usually means GTK+ is incorrectly
> installed.
> > checking for pkg-config... (cached) /usr/bin/pkg-config
> > checking for GLIB - version >= 2.0.0... yes (version 2.10.3)
> > checking whether GLib supports loadable modules... yes
> > checking for inttypes.h... (cached) yes
> > checking whether inttypes.h defines the PRI[doxu]64 macros... yes
> > checking for gethostbyname... yes
> > checking for connect... yes
> > checking whether to use libpcap for packet capture... yes
> > checking for extraneous pcap header directories... not found
> > checking pcap.h usability... no
> > checking pcap.h presence... no
> > checking for pcap.h... no
> > configure: error: Header file pcap.h not found; if you installed libpcap
> > from source, did you also do "make install-incl", and if you installed a
> > binary package of libpcap, is there also a developer's package of libpcap,
> > and did you also install that package?
> >
> >   Can someone please tell us what needs to be done here? It would be of
> great help if you could give us the exact procedure for building the exe for
> Windows. Do we have to set the PATH to any specific directory. Do we have to
> install any additional packages. If so, what are the additional packages to
> be installed? Your help in overcoming these bottlenecks will be very much
> appreciated. Thanks in advance.
> >
> >   Version used: ethereal-0.10.8-SVN-13012
> >
> >   Thanks,
> >   Annie.D
> >
> >
> > ---------------------------------
> >  Find out what India is talking about on  - Yahoo! Answers India
> >  Send FREE SMS to your friend's mobile from Yahoo! Messenger Version 8.
> Get it NOW
>
> _______________________________________________
> Wireshark-dev mailing list
> Wireshark-dev@xxxxxxxxxxxxx
> http://www.wireshark.org/mailman/listinfo/wireshark-dev
>
> _______________________________________________
> Wireshark-dev mailing list
> Wireshark-dev@xxxxxxxxxxxxx
> http://www.wireshark.org/mailman/listinfo/wireshark-dev