Ethereal-dev: Re: [Ethereal-dev] Binary PDUs in TCP: Possible to put each on different summary

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
From: Matthijs Melchior <mmelchior@xxxxxxxxx>
Date: Sat, 31 May 2003 10:19:05 +0200
Guy Harris wrote:

On Thu, May 29, 2003 at 01:32:55PM -0600, Bryant Eastham wrote:
We have a binary protocol over TCP. I have the PDUs being dissecting
correctly, but if multiple PDUs are in the same TCP "packet" they all appear
together in the tree (each as a tree item). Is it possible to have each PDU
appear on its own in the summary?

If by "the summary" you mean the summary display with columns such as
the Info column, the answer is "no" - there's a one-to-one
correspondence between link-layer frames and summary lines.
Well, I have a simmilar environment, a tcp stream that transports asn1
formatted messages. My solution is as follows:

The summary lines mention the first PDU in a packet, followed by [12+1 msgs], which is to be interpreted as 12 full PDU's in this packet + 1 incomplete PDU.
That last one is than the first PDU of the next, desegmented, packet.
And in the packet display each PDU apears at top level. Like this

---------------------------------------------------------------
time source dest ASN1 ASN1: type-A [12+1 msgs]
time source dest ASN1 ASN1: type-C [13+1 msgs]
---------------------------------------------------------------
Frame 1 ....
Etherrnet II, Src: ......
Internet Protocol, Src Addr: .....
Transmission Control Protocol, Src Port: ....
ASN.1: type-A
ASN.1: type-D
.....
ASN.1: type-A
ASN.1: type-B (incomplete)
---------------------------------------------------------------
hex display....
---------------------------------------------------------------


--
Regards,
----------------------------------------------------------------  -o)
Matthijs Melchior                                       Maarssen  /\\
mmelchior@xxxxxxxxx                                  Netherlands _\_v
---------------------------------------------------------------- ----