Wireshark · Wireshark-dev: Re: [Wireshark-dev] Troubles With Reassembly

[Guy Harris <guy@xxxxxxxxxxxx>]

On Apr 22, 2009, at 3:03 PM, gogrady@xxxxxxxxx wrote:

> ---- Guy Harris <guy@xxxxxxxxxxxx> wrote:
>
> > Is the idea that, if you have a sequence of, for example:
>
> 	BNP header+multimessage begin
> 	BNP header+multimessage middle 1
> 	BNP header+multimessage middle 2
> 	BNP header+multimessage end
>
> you would strip off all the BNP headers, concatenate the four BNP data
> chunks in order (begin, middle 1, middle 2, and end, in that order),
> > and then dissect the concatenated chunk as a single message?
>
> close, take all of the beginning, including bnp as bnp is stripped in
> dissector function, and strip the bnp from the middle and end and  
> concatenate
> them onto the end of the beginning.

I.e, the sequence of:

	BNP header 1+multimessage begin
	BNP header 2+multimessage middle 1
	BNP header 3+multimessage middle 2
	BNP header 4+multimessage end

turns into

	BNP header 1+BNP header 2+BNP header 3+BNP header 4+multimessage begin 
+multimesssage middle 1+multimessage middle 2+multimessage end

?