I have created a dissector for a line-based protocol but have some problems when data are bigger than packet size. When the data is too big, I need to reassemble a number of packets to have a complete data before processing it. Here you can find a part of my dissector. I need your help for
asked 06 Apr '11, 09:34 Thibault edited 03 Jul '14, 10:53 Lekensteyn |
One Answer:
When you have to reassemble payload of a protocol without a length header, you should use the point 2.7.2 Modifying the pinfo struct. of the README.developer. BTW: this section has a code fragment, that works with strings terminated by a answered 07 Apr '11, 23:16 harper |