reasseble.c is good for fragmented packets, I use it when I have
fragmented packets over a few frames.
I need a solution that composite was supposed to give, in the same
frame. I will explain graphically.
Let's say this is my buffer for the given frame:
1xxxxxxx
xxxxxxxx
xxx2ooxx
xxxxxxxx
x3ooxxxx
xxxxx4oo
xxxxxxxx
I need a function that will help me get a new buffer (in the same frame,
without touching the original buffer) that will be:
1xxxxxxx
xxxxxxxx
xxx2xxxx
xxxxxxx3
xxxxxxxx
x4xxxxxx
xx
I want to display the original buffer and parse it as usual, I also want
to have the new buffer to be sent to a different dissector that will
take care of the appended data.
Yosi
-----Original Message-----
From: wireshark-dev-bounces@xxxxxxxxxxxxx
[mailto:wireshark-dev-bounces@xxxxxxxxxxxxx] On Behalf Of Jakub Zawadzki
Sent: Monday, March 28, 2011 10:30 PM
To: Developer support list for Wireshark
Subject: Re: [Wireshark-dev] tvb_composite
On Mon, Mar 28, 2011 at 03:49:52PM -0400, Jeff Morriss wrote:
> I've never heard of anyone successfully using composite TVBs so I'm
> guessing the comment (from 2007) is still accurate.
Not working and unused API for at least 4 years... it means than can be
removed, right? :)
Isn't reassemble.c API good (and working!) replacement for composite
TVBs?
Regards.
________________________________________________________________________
___
Sent via: Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
Archives: http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe
