|
Ethereal
[Ethereal-dev] Request for evolution in TCP dissector
|
|
- Subject: [Ethereal-dev] Request for evolution in TCP dissector
- From: Pierre JUHEN <pierre.juhen@xxxxxxxxxx>
- Date: Mon, 09 Oct 2006 21:33:51 +0200
I would like to use the pdml of tshark to work on a "reassembled" TCP
layer.
If the packet needs really reassembling, it's ok, and I can use the
"tcp.segment" fields to get the payload.
But if the applicative PDU is inside only one packet, there is no
tcp.segment.
Would it be possible to get a "tcp.segment" to get the payload, even if
there is only one segment.
Thanks for your advice
Pierre JUHEN
Powered by MHonArc 2.6.10