SSL defragmentation question
"authesserre samuel" <[email protected]>
| Newsgroups | gmane.network.ethereal.devel |
|---|---|
| Message-ID | <[email protected]> |
Hi, I'm working on TLS/SSL and DTLS for Ethereal and I have a question about desegmentation (I speak about desegmentation of packets who are encrypted by SSL dissector, I have already mentionned in another mail the pb of desegmentation due to TCP checksums calculation...) I have found this link : http://www.ethereal.com/lists/ethereal-dev/200108/msg00148.html In this post the person says that it's impossible to reassemble without know in advance if the packet is a fragment. In the case of SSL, it's impossible (we know that SSL record is a fragment so we tell to TCP more data but for the HTTP protocol carried by SSL....) Tell me if I'm wrong but tcp dissector don't know if it's a fragment or not when we tell him more bytes.... I want to implement this things because the patch that I give last week (and the original plugin in ethereal source tree) allow to see data with "Follow SSL Stream" option, but if you have one HTTP page split between multiple SSL record (who aren't in the same tcp packet) you can see header correctly dissected but the second part will be marked with "data (...)". I want the same result under SSL that the HTTP dissector (all the HTTP page is reassembled in a packet) The 8.4 chapter (how to reassemble split packet) isn't clear for me .... joined file is a example of this problem (you don't need patch it's TLS 1.0 version) thanks, -- ++++++++++++++++++++++++++ + Authesserre Samuel + + 12 rue de la défense passive+ + 14000 CAEN + + FRANCE + + 06-27-28-13-32 + + [email protected] + ++++++++++++++++++++++++++