Wireshark-dev: Re: [Wireshark-dev] TCP Reassembly in wireshark

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Mon, 10 Feb 2014 13:14:07 -0800
On Feb 9, 2014, at 11:39 PM, Vishnu Bhatt <vishnu.bhatt@xxxxxxxxxxx> wrote:

> Thanks for the information. So you mean to say that the upper layer tells TCP about its size.

Yes.

> Could you please tell me how SABP does this?

It does it by calling tcp_dissect_pdus() in its dissector routine, passing it a get_pdu_len routine, get_sabp_pdu_len(), that looks at the first few bytes of the message (using a routine to do so for ASN.1 PER) to determine the length.

See Anders's message for details.