On Thu, Jan 07, 2010 at 02:09:43AM -0800, Guy Harris wrote:
> On Jan 7, 2010, at 1:48 AM, paul@xxxxxxxxxxxxxx wrote:
> > TCP has a tcp_dissect_pdus() function that higher protocols can use
> > to eliminate their dependency on the TCP framing. Is there anything
> > generic for other layers?
> I.e., for other byte-stream-oriented layers?
Yes.
> tcp_dissect_pdus()
> resides atop lower-level reassembly code in the TCP dissector; a similar
> lower-level reassembly mechanism exists in the SSL/TLS dissector. There's
> currently no generic code used by both the TCP and SSL/TLS dissector;
> I have not looked at whether such a generic mechanism could be provided.
Ok, thanks. Looks like I'll have to continue to roll my own then.
Any idea why I might be getting the overlaps?
Paul