Wireshark-dev: [Wireshark-dev] truncated packet
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: "Martin Corraine (mcorrain)" <mcorrain@xxxxxxxxx>
Date: Fri, 11 Jul 2008 09:25:53 -0400
Hello,
 
I figured out how to drop a plugin into any win32 Wireshark installation. The trick to do this is to use the same complier as the official Wireshark installer was compiled with. I had to switch from VS2005EE to VS6 for it to work on win32. Just thought I throw that out there.
 
Now my question...
 
My dissector use to reassemble packets but for some unknown reason it doesn't now. I'm running out of ideas as to what I may have changed. I get the following message:[ Packet size limited during capture: GED125 truncated]. I'm still using the same capture file too and it worked a few days ago. Could have an update to the Wireshark sources changed the way you reassemble packets under TCP? Any advice will help.
 

tcp_dissect_pdus(tvb, pinfo, tree, ged125_desegment_body, 4, get_ged125_pdu_len, dissect_ged125_base_messages);

 

Thanks,

Martin