Ethereal-dev: RE: [Ethereal-dev] Another advice question

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Tom Uijldert <Tom.Uijldert@xxxxxxxxxxxxx>
Date: Thu, 20 Feb 2003 09:54:33 +0100
I think you need the utility-routines in "reassemble.[ch]".

An example of the use of these routines can be found in "packet-wtp.c".
WTP packets indicate they're part of a message using sequence-numbers.

Hope this helps.

Regards,
Tom Uijldert          Email: Tom.Uijldert@xxxxxxxxxxxxx

> -----Original Message-----
> From: William Mulvihill [mailto:will.mulvihill@xxxxxxxxxxxx]
> Sent: Wednesday, February 19, 2003 6:10 PM
> To: ethereal-dev@xxxxxxxxxxxx
> Subject: [Ethereal-dev] Another advice question
> 
> 
> Hi again,
> 	What would be the best way in the Ethereal API to 
> assemble a multipart
> packet?  That is, I've got a UDP protocol, in the first 
> packet, you find
> out the packet type, data size and Message number, but the entire data
> may not be contained in the first packet.  It may be strewn 
> across more
> than 32 packets.  These packets have identifiers saying "I'm packet #4
> of 6 in Message #32" and then just contain data.
> 
> So what I need to know if how to reassemble the whole "Message" to be
> able to parse the entire data set at once (if of course every 
> packet in
> the message arrives safely, sometimes it does not)?  It 
> wouldn't matter
> if I added the entire parsing of the packet to the first or 
> last packet
> tree.  Either would be fine.
> 
> I looked at the README.developer and read about conversations, but I
> don't think that's what I'm after.  Is p_add_proto_data what 
> I should be
> looking at?  But I could have multiple "Messages" interlaced...
> 
> Thanks in advance for your advice.
> 
> -Will Mulvihill
> 
> 
> _______________________________________________
> Ethereal-dev mailing list
> Ethereal-dev@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-dev
>