Wireshark · Wireshark-dev: Re: [Wireshark-dev] Multiple pdus atop TCP -- a lie in README.developer?

[Richard van der Hoff <richardv@xxxxxxxxxxxxx>]

Guy Harris wrote:
> Then
>
> 	1) have a dissector for a single one of your PDUs;
>
> 	2) use that dissector with tcp_dissect_pdus() when dissecting your  
> protocol over TCP;
>
> 	3) write your own reassembly code for other protocols and call your  
> single-PDU dissector from that code.

And implement equivalents for tcp_dissect_pdus() for the other transport 
protocols? Ok; that makes some sense I guess (although seems to tie 
together the dissectors unnecessarily).

But my real question still stands: does the technique in 
README.developer section 2.7.2, with updating  pinfo->desegment_offset 
and pinfo->desegment_len, not work?


--
Richard van der Hoff <richardv@xxxxxxxxxxxxx>
Systems Analyst
Tel: +44 (0) 845 666 7778
http://www.mxtelecom.com