This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hello there,

I am writing a LUA dissector for an application protocol. The protocol splits data over multiple TCP segments. To reassemble the segments I set pinfo.desegment_len to length of the complete data minus current buffer length. Usually this works very well.

However on cases where TCP segments are retransmitted (DUP Acks etc.), the TCP data segments are not reassembled. At least my dissector never receives the reassembled tvbuf object.

Is anyone aware of difficulties in TCP reassembly with out-of-order packets? (Retransmissions, DUP ACks etc?)

asked 11 Feb '17, 15:43

niklas's gravatar image

niklas
6223
accept rate: 0%

Be the first one to answer this question!
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×637
×431
×78

question asked: 11 Feb '17, 15:43

question was seen: 641 times

last updated: 11 Feb '17, 15:43

p​o​w​e​r​e​d by O​S​Q​A