Hi,
I'm working on TLS/SSL and DTLS for Ethereal and I have a question
about desegmentation (I speak about desegmentation of packets who are
encrypted by SSL dissector, I have already mentionned in another mail
the pb of desegmentation due to TCP checksums calculation...)
I have found this link :
http://www.ethereal.com/lists/ethereal-dev/200108/msg00148.html
In this post the person says that it's impossible to reassemble
without know in advance if the packet is a fragment. In the case of
SSL, it's impossible (we know that SSL record is a fragment so we tell
to TCP more data but for the HTTP protocol carried by SSL....)
Tell me if I'm wrong but tcp dissector don't know if it's a fragment
or not when we tell him more bytes....
I want to implement this things because the patch that I give last
week (and the original plugin in ethereal source tree) allow to see
data with "Follow SSL Stream" option, but if you have one HTTP page
split between multiple SSL record (who aren't in the same tcp packet)
you can see header correctly dissected but the second part will be
marked with "data (...)".
I want the same result under SSL that the HTTP dissector (all the HTTP
page is reassembled in a packet)
The 8.4 chapter (how to reassemble split packet) isn't clear for me ....
joined file is a example of this problem (you don't need patch it's
TLS 1.0 version)
thanks,
--
++++++++++++++++++++++++++
+ Authesserre Samuel +
+ 12 rue de la défense passive+
+ 14000 CAEN +
+ FRANCE +
+ 06-27-28-13-32 +
+ sauthess@xxxxxxxxx +
++++++++++++++++++++++++++
_______________________________________________
Ethereal-dev mailing list
Ethereal-dev@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-dev