Ethereal-dev: Re: [Ethereal-dev] Patch for packet-enip.c

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Mon, 26 Jan 2004 20:47:03 -0800

On Jan 25, 2004, at 11:29 PM, Joakim Wiberg wrote:


-----Original Message-----
From: Guy Harris [mailto:guy@xxxxxxxxxxxx]
On Jan 22, 2004, at 11:51 PM, Joakim Wiberg wrote:


Attached is a small patch for packet-enip.c. It make is possible to
dissect EtherNet/IP packets that contains two or more messages
encapsulated into one packet.


Does that happen for ENIP-over-UDP, or just for ENIP-over-TCP?


This is something that only can happend on TCP.
OK, I've checked in a change to make the ENIP-over-TCP dissector use "tcp_dissect_pdus()"; there's a preference setting to control whether messages split across TCP segment boundaries should be reassembled (it's on by default, and is in the "Edit->Protocols" dialog box, under "ENIP"; you need to turn TCP reassembly on as well - that's in "Edit->Protocols", under TCP). Whether that preference is on or off, it should handle multiple messages in a single TCP segment.