Wireshark-dev: Re: [Wireshark-dev] Some more question on TCP desegmentation
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Kaul <mykaul@xxxxxxxxx>
Date: Wed, 1 Dec 2010 08:40:50 +0200


On Wed, Dec 1, 2010 at 8:22 AM, Andreas <AndreasSander1@xxxxxxx> wrote:
Am 30.11.2010 13:05, schrieb Kaul:
> 1. If only some of the segments (say, first 50 out of 70), will I get that
> partial PDU, or just the original TVB (the first packet, essentially)?

Don't know what you ask for. But when you call tcp_dissect_pdus(), you
pdu_dissect function will get a fresh new TVB with that part.

Which part exactly? A new tvb in the length of the original TVB, or in the length of as-much-PDU-as-it-could-fetch?
Y.
 

--
Andy

___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
            mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe