Re: [Wireshark-dev] Export PDU:s

Pascal Quantin skrev 2013-05-10 15:20: 2013/5/5 Anders Broman > Hi, I have added a basic implementation making it possible to export higher level PDU:s to file using a USER_DLT. The basic implementation makes it possible to export SIP traffic to

Re: [Wireshark-dev] Filebacked-tvbuffs : GSoC'13

On May 2, 2013, at 9:25 AM, Anders Broman wrote: > Alternatively if the file is rewritten on the first pass writing the > reassembled data together with the packet holding the last fragment the > reassembled data could be read together with the packet > But that might have other problems and m

Re: [Wireshark-dev] Filebacked-tvbuffs : GSoC'13

On Apr 18, 2013, at 10:28 AM, Evan Huus wrote: > That hadn't even occurred to me; I was thinking more of the fact that > we don't have a separate 'head' structure for reassembly chains and > just assume certain fields are set/unset based on whether the > structure is first in the list or not. I

Re: [Wireshark-dev] Filebacked-tvbuffs : GSoC'13

On May 11, 2013, at 7:28 AM, Ambarisha B wrote: > I was trying to move the reassembled data from the reassembled_table to > frame_data. Moving stuff to frame_data is something that should only be done as a last resort if it's being done as part of a project to reduce memory usage. :-) *Every

Re: [Wireshark-dev] Filebacked-tvbuffs : GSoC'13

Hi, I was trying to move the reassembled data from the reassembled_table to frame_data. The key to the reassembled_table is (framenum, ID). I am not able to figure out what ID is for. In a capture file, frame number itself would be unique, wouldn't it? Cheers Ambarisha ___