Wireshark · Wireshark-dev: [Wireshark-dev] How to get the reassembled pkt in a lua post-dissector?

[xiaofeng <wasphin@xxxxxxxxx>]

Hi,

I am writing a lua post-dissector to get some fields from a HTTP+XML body.

If I check ``http.content_type`` like this:
```
function proto.dissector(tvbuf, pktinfo, root)
  local content_type = http_content_type()
  if not content_type then return end
  if (tostring(content_type) ~= "text/xml") then return end

  -- blabla
end
```
some times the ``tvbuf`` will only contains part of a reassembled http pkt.

How or is there any way to get the reassembled http pkt directly?
Or must I assemble the http pkt again?

Any suggestions is appreciate. Thanks.

Best regards,
Xiaofeng

-- 
xiaofeng

--
gpg key fingerprint:
2048R/5E63005B
C84F 671F 70B7 7330 4726  5EC8 02BC CBA2 5E63 005B
--
trans-zh_cn mailing list
trans-zh_cn@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/trans-zh_cn