On Jul 21, 2008, at 12:51 PM, Kwan Ng [LAVA] wrote:
I’m using tcp_dissect_pdus() to dissect a TCP protocol that doesn’t
include a message length field. The messages are terminated by “\r
\n”.
Then you shouldn't be using tcp_dissect_pdus(); by intent and design,
it is solely for use with protocols where
1) the length of the packet can be determined by looking at the first
N bytes of the packet
and
2) all packets are at least N bytes long.
Line-oriented protocols are *not* those types of protocols.
See, instead, examples such as the SMTP dissector (packet-smtp.c).