Wireshark-dev: [Wireshark-dev] question about TCP flag DESEGMENT_UNTIL_FIN
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: "yin sun" <sunyin51@xxxxxxxxx>
Date: Tue, 31 Jul 2007 16:53:19 -0400
Hello,
I found out that,
When a subdissector on top of TCP set   
   if (pinfo->can_desegment) {
        pinfo->desegment_len = DESEGMENT_UNTIL_FIN;
        return;
    }
when pinfo->can_desegment is 0 again, subdissector received the whole TCP stream in tvb minus the payload from the FIN packet.

Is this by design? or by mistake?

Thanks,
/Yin