[prev in list] [next in list] [prev in thread] [next in thread] 

List:       wireshark-dev
Subject:    Re: [Wireshark-dev] How to do a multi-packet dissector
From:       Balint Reczey <balint.reczey () ericsson ! com>
Date:       2009-11-25 10:17:09
Message-ID: 4B0D0425.7070002 () ericsson ! com
[Download RAW message or body]

Hi,

 From http://wiki.wireshark.org/Lua/Dissectors :

"Like dissectors written in C, Lua dissectors can use Wireshark's 
ability to reassemble TCP streams:

     * To not use TCP reassembly, make your Lua dissector function 
return nothing (nil) or 0 (in case dissector can't dissect packet).
     * To request reassembly via the pinfo struct as described in 
README.developers, set pinfo.desegment_len and pinfo.desegment_offset 
(works from Wireshark 1.1.2)."

Cheers,
Balint

Morita, Bill wrote:
> I am writing a Lua dissector for a streaming protocol that may spread a 
> “record” over several TCP packets.
> 
> What is a reasonable approach to take with this type of situation??
> 
>  
> 
> Thanks in advance.
> 
>  
> 
> ---------------
> 
> Bill Morita
> 
> Cube 1040
> 
> 503-495-9513
> 
> Bill.Morita@arrisi.com
> 

___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev@wireshark.org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request@wireshark.org?subject=unsubscribe

[prev in list] [next in list] [prev in thread] [next in thread]