Wireshark-dev: Re: [Wireshark-dev] Dissecting - access previous packet in TCPconversation
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: "news.gmane.com" <AndreasSander1@xxxxxxx>
Date: Tue, 23 Nov 2010 18:21:29 +0100
"Jon Andersen" <janderse@xxxxxxxxx> wrote in
message
news:<AANLkTikjGbYJW-JSOo6ZxEXxzaDf6mdOZ2VP341zvDOS@xxxxxxxxxxxxxx>...

> The protocol I am dissecting requires a bit of data from the previous
> packet
> in order to properly dissect the current one. Using per-packet data
> (p_get_proto_data(), etc) and per-conversation data (find_conversation())
> gets me part of the way there but not all the way. I can use per-packet
> data to store the data I need with the packet, but the problem is finding
> the previous packet when dissecting the current one.

Is dissect_pdus() what you want? Using this function, you don't need to 
care, if your message crosses the packt boundaries?

Andy.