hi, i have a custom dissector, after dissect this custom protocol, the remaining of the packet should be dissect as an ip packet. but the length of ip packet report in my custom dissector and ip length field set to zero in data. ip packets are like this : 0x45000000....
i want to read Total Length from my custom protocol not the 2-3th bytes of data.can any one help me?thanks asked 31 Aug '17, 12:31 ghader edited 31 Aug '17, 12:32 |
One Answer:
Then it's not a valid IP packet. Fix your custom protocol, or its implementation, to provide a valid length field in the IP header. answered 31 Aug '17, 14:35 Guy Harris ♦♦ |