Wireshark-dev: Re: [Wireshark-dev] Some more question on TCP desegmentation

Date Prev · Date Next · Thread Prev · Thread Next
From: Anders Broman <a.broman@xxxxxxxxx>
Date: Wed, 01 Dec 2010 08:03:30 +0100
Kaul skrev 2010-12-01 07:40:


On Wed, Dec 1, 2010 at 8:22 AM, Andreas <AndreasSander1@xxxxxxx> wrote:
Am 30.11.2010 13:05, schrieb Kaul:
> 1. If only some of the segments (say, first 50 out of 70), will I get that
> partial PDU, or just the original TVB (the first packet, essentially)?

Don't know what you ask for. But when you call tcp_dissect_pdus(), you
pdu_dissect function will get a fresh new TVB with that part.

Which part exactly? A new tvb in the length of the original TVB, or in the length of as-much-PDU-as-it-could-fetch?
Y.
 

--
Andy

I pretty sure you won't get any thing unless the reassembly is successful e.g all segments found.
Regards
Anders
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
            mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe

___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe