[prev in list] [next in list] [prev in thread] [next in thread] 

List:       ethereal-users
Subject:    Re: [Ethereal-users] ? change in Gnutella dissector
From:       Guy Harris <gharris () sonic ! net>
Date:       2005-01-31 0:38:04
Message-ID: 41FD7DEC.5050105 () sonic ! net
[Download RAW message or body]

Guy Harris wrote:

> The Gnutella dissector should probably treat any putative Gnutella 
> control packet with an unknown packet type, or a length greater than 
> some value, as part of an upload/download stream rather than as a 
> control packet.  Unfortunately, that might mean it'll have to do more of 
> the reassembly work itself, rather than using "tcp_dissect_pdus()".

Nope.  I've checked in a change that bypasses "tcp_dissect_pdus()" if 
there's enough data to get the putative length field and if, once 
gotten, it's bigger than 4K.

_______________________________________________
Ethereal-users mailing list
Ethereal-users@ethereal.com
http://www.ethereal.com/mailman/listinfo/ethereal-users
[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic