[Wireshark-dev] Index of multiple protocol frames in one packet?

2015-10-05 Thread Petr Gotthard
Hello, Is there a way to distinguish multiple frames of the same protocol in one TCP/IP packet? I have several small AMQP frames which all fit into a single IP frame, so they share a single packet_info structure.When I call p_add_proto_data() for the second AMQP frame, it (obviously) overwrites

[Wireshark-dev] Two "Descrypted SSL data" sections in one frame

2015-02-08 Thread Petr Gotthard
Hello,   I'm trying to add SSL support for the AMQP dissector. I managed to correctly decrypt and reassemble the application data, however from some reason the SSL dissector (or someone else?) split the application data in two blocks: the first data block contains the first byte of the AMQP fram