Ethereal-users: Re: [Ethereal-users] ? change in Gnutella dissector

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Sun, 30 Jan 2005 16:38:04 -0800
Guy Harris wrote:

The Gnutella dissector should probably treat any putative Gnutella control packet with an unknown packet type, or a length greater than some value, as part of an upload/download stream rather than as a control packet. Unfortunately, that might mean it'll have to do more of the reassembly work itself, rather than using "tcp_dissect_pdus()".

Nope. I've checked in a change that bypasses "tcp_dissect_pdus()" if there's enough data to get the putative length field and if, once gotten, it's bigger than 4K.