SSL defragmentation question

"authesserre samuel" <[email protected]>
Newsgroups gmane.network.ethereal.devel
Message-ID <[email protected]>
Hi,

I'm working on TLS/SSL and DTLS for Ethereal and I have a question
about desegmentation (I speak about desegmentation of packets who are
encrypted by SSL dissector, I have already mentionned in another mail
the pb of desegmentation due to TCP checksums calculation...)

I have found this link :
http://www.ethereal.com/lists/ethereal-dev/200108/msg00148.html
In this post the person says that it's impossible to reassemble
without know in advance if the packet is a fragment. In the case of
SSL, it's impossible (we know that SSL record is a fragment so we tell
to TCP more data but for the HTTP protocol carried by SSL....)
Tell me if I'm wrong but tcp dissector don't know if it's a fragment
or not when we tell him more bytes....


I want to implement this things because the patch that I give last
week (and the original plugin in ethereal source tree) allow to see
data with "Follow SSL Stream" option, but if you have one HTTP page
split between multiple SSL record (who aren't in the same tcp packet)
you can see header correctly dissected but the second part will be
marked with "data (...)".
I want the same result under SSL that the HTTP dissector (all the HTTP
page is reassembled in a packet)

The 8.4 chapter (how to reassemble split packet) isn't clear for me ....

joined file is a example of this problem (you don't need patch it's
TLS 1.0 version)

thanks,



-- 
++++++++++++++++++++++++++
+ Authesserre Samuel            +
+ 12 rue de la défense passive+
+ 14000 CAEN                      +
+ FRANCE                           +
+ 06-27-28-13-32                   +
+ [email protected]          +
++++++++++++++++++++++++++
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.