[EMAIL PROTECTED] wrote: > Can anyone see any problem with this?
1) as indicated in my earlier mail, it won't throw an exception if you have a bad packet that should have a request body but doesn't. 2) if you ignore that, it should be tvb_reported_length_remaining(), because tvb_length_remaining() gives the amount of *captured* data, not the amount of *actual* data, and you want to throw an exception if the capture was cut short by a snapshot length and that meant that the request body was present on the wire but wasn't in the capture. _______________________________________________ Wireshark-dev mailing list Wireshark-dev@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-dev
