Wireshark-bugs: [Wireshark-bugs] [Bug 9303] some DCERPC fragment are not identify leading to cor

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Mon, 04 Nov 2013 06:35:33 +0000

Comment # 8 on bug 9303 from 
(In reply to comment #7)
> Hmmm, ok. I think you can accomplish the same thing by checking if
> pinfo->layer_names contains "DCERPC:"? That should indicate that the current
> frame already contains at least one DCERPC fragment without having to store
> or manipulate any extra data.
>
With my current patch when I do a print of this structure there is nothing in
it.
 (NULL pointer).

It seems that it's only on the second pass that this information will be
present.
We need this information in the first pass so that TCP (or anything bellow
DCERPC) can desegment properly.

Sounds like your proposal is not not a good fit.

You are receiving this mail because:
  • You are watching all bug changes.