Wireshark · Wireshark-dev: [Wireshark-dev] Conversation tracking

[Tobias Weiss <tweiss@xxxxxxxxxxxxxxx>]

Hi all,

I'm using conversation tracking and
ran into an issue. My code looks like this (as suggested in the README.developer):

conv = find_conversation(pinfo->fd->num,
    &pinfo->src,
    &pinfo->dst,
    pinfo->ptype,
    pinfo->srcport,
    pinfo->destport,
    0);

if(conv != NULL) { get conversation
data }
else { create conversation data with
se_alloc() and add it to the conversation }

When the dissectors main function is
called for the first time, find_conversation() returns a non-null pointer!
As far as I understood it should return 0 as conversation_new() was never
called for this address/port combination yet. What am I missing here?

Tobi