On Fri, Aug 5, 2016 at 1:39 PM, John Dill
wrote:
> One problem I have is that I'm creating multiple subtrees for a protocol
> when two PDUs are found in the same frame. What's the best way to avoid
> this?
>
> \code
> gint
> dissect_mk32_tcp_pdu(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tre
>Message: 1
>Date: Fri, 5 Aug 2016 14:47:59 +0100
>From: Graham Bloice
>To: Developer support list for Wireshark
>Subject: Re: [Wireshark-dev] dissecting TCP packets with multiple PDUs
>
>>On 5 August 2016 at 14:08, John Dill wrote:
>>
>> I have a TCP protoc
arger than a typical amount of fixed bytes. So
the issue really may be the TCP dissector and not your protocol/dissector.
-Original Message-
From: Graham Bloice
To: Developer support list for Wireshark
Sent: Fri, Aug 5, 2016 9:48 am
Subject: Re: [Wireshark-dev] dissecting TCP pa
On 5 August 2016 at 14:08, John Dill wrote:
> I have a TCP protocol that sends multiple PDUs. So far, my dissector
> seems to handle the cases where one PDU is split across multiple frames,
> and when multiple PDUs are dissected in one frame. Unfortunately, I'm
> having issues where the TCP dis
I have a TCP protocol that sends multiple PDUs. So far, my dissector seems to
handle the cases where one PDU is split across multiple frames, and when
multiple PDUs are dissected in one frame. Unfortunately, I'm having issues
where the TCP dissection stops if I have multiple PDUs that are spli
