Wireshark-dev: Re: [Wireshark-dev] TCP packets reassemble mechanism
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Stephen Fisher <stephentfisher@xxxxxxxxx>
Date: Tue, 16 Jan 2007 12:32:51 -0800
On Tue, Jan 16, 2007 at 05:35:50PM +0200, sharon lin wrote:

> I would like to understand the TCP reassemble mechanism. If I 
> configured it to work on top of TCP protocol from the "preferences" 
> dialog do I guaranteed to get reassembled (Full) packets to my 
> packet-dissector module.

Did you enable reassembly in the TCP dissector preferences or for a 
protocol that rides on top of TCP?  Wireshark's TCP reassembly functions 
require the dissector to ask for reassembly of 'x' number of bytes (or 
"the next segment" or "until FIN").


Steve