On Tue, Dec 14, 2021 at 10:18 AM Moshe Kaplan <mosheekap...@gmail.com> wrote: > > I considered using such a data structure, but the challenge there is that > there's no guarantee of a 'file transfer complete' that could be used to > trigger reassembly and adding to the export objects list. AFAIK, it's also > not possible to have a function to run after all packets were dissected to > generate the export object list entries then.
I am very unfamiliar with the tap infrastructure but perhaps you could introduce an EOM event through the tap so you could detect the data connection going down and do reassembly there. -- Regards, Richard Sharpe (何以解憂？唯有杜康。--曹操)(传说杜康是酒的发明者) ___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev@wireshark.org> Archives: https://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-requ...@wireshark.org?subject=unsubscribe
