Wireshark-dev: Re: [Wireshark-dev] TCP reassembly when packet capture size limited

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Tue, 16 Nov 2010 10:17:18 -0800
On Nov 16, 2010, at 9:58 AM, Stephen Fisher wrote:

> Should TCP reassembly be done when the packet size was limited during 
> capture?

Not unless we can do reassembly with "holes" in the result, which we currently can't do.  At least some other dissectors check to make sure, when adding data to the reassembled packet, that all the data they're adding is present.