Re: [Wireshark-dev] Reassembling Packets need some help plz

2011-09-27 Thread Richard van der Hoff
Hi Marcel, I did some work on those reassembly routines a few years ago, but I can only really repeat what Chris has said and encourage you to stick with it. I think you're doing the right thing with fragment_add_seq_check, so I'm not sure why it's always returning a NULL fragment_data. The ma

Re: [Wireshark-dev] Reassembling Packets need some help plz

2011-09-26 Thread Marcel Haas
First at all thx Chris for the answer. The problem is that my packt isn't split by tcp or udp but split by themself. It only is transported by udp(udp header) The question is can i actually use fragment_add_seq_check to split my packets. Im looking for 2 weeks at this problem now. Makes me go

Re: [Wireshark-dev] Reassembling Packets need some help plz

2011-09-23 Thread Chris Maynard
Marcel Haas writes: > Nobody an idea ? Hi Marcel, I'm sorry to say that I don't have any helpful advice for you. The problem is that reassembly can be very complicated, as you've discovered I'm sure. My personal experience with reassembly is limited, and fortunately for me, I've been lucky en

Re: [Wireshark-dev] Reassembling Packets need some help plz

2011-09-22 Thread Marcel Haas
Nobody an idea ? On Tue, 20 Sep 2011 14:43:04 +0200, Marcel Haas wrote: Hello, im just writeing my first dissector and i have some problems with the reassembling My prtocoll contain some fields for Snode =ID ,Packetnumber and total packets i get them with snode =tvb_get_guint8(tvb,offset);

[Wireshark-dev] Reassembling Packets need some help plz

2011-09-20 Thread Marcel Haas
Hello, im just writeing my first dissector and i have some problems with the reassembling My prtocoll contain some fields for Snode =ID ,Packetnumber and total packets i get them with snode =tvb_get_guint8(tvb,offset);offset +=1; pnum =tvb_get_guint8(tvb,offset);offset +=1; totalp =tvb_get_gui