[bugzilla-daemon@xxxxxxxxxxxxx]

Bug ID	9049
Summary	Added, in tshark output, timestamps of single TCP chunks ['-z follow,tcp,raw,N']
Classification	Unclassified
Product	Wireshark
Version	SVN
Hardware	x86
OS	All
Status	UNCONFIRMED
Severity	Enhancement
Priority	Low
Component	TShark
Assignee	bugzilla-admin@wireshark.org
Reporter	ncrdy7wf@tiscali.it
Attachment #11393 Flags	review_for_checkin?

Created attachment 11393 [details]
diff patch to enable timestamping of chunks in tshark's 'tcp follow stream'

Build Information:
SVN 51384
--
I've made this little quick&dirty patch, because I needed tshark to timestamp
all the single chunks of a TCP stream 'aligned'
by the "follow TCP stream" feature called in ui/cli/tap-follow.c
[-> '-z follow,tcp,raw,N'].

I know that it does involve adding an element to the tcp_stream_chunk struct
defined in epan/follow.h though,
and adding a parameter to reassemble_tcp function in epan/follow.h,
epan/follow.c and epan/dissectors/packet-tcp.c
[the only place where this function is used so far], so I dont think it will be
accepted.

I've submitted it anyway, because I think that it is easy to maintain also in
the future, it will be enough to grep the code for
'reassemble_tcp' [hoping that nothing will come to count the elements of
tcp_stream_chunk!].

---

      You are receiving this mail because:

• You are watching all bug changes.