Wireshark · Wireshark-users: Re: [Wireshark-users] LUA dissector - combine data from 2 UDP packets, display issue

[Michael Poroger <bezenchu@xxxxxxxxx>]

Something I build by myself. The idea is similar to this implementation (in the answer) - just storing the data between packet X-1 to packet X.

Not sure about the actual implementation (as already on weekend), but I think that this is not persistent storage, as if the data in the packet is complete, the storage is set to an empty one. In any case, if packet X-1 does not contain complete data,  this data is available for packet X.

-----------------------------
Michael Poroger

"Science is not only knowledge, science is also to be dare"
Shimon Peres

On Fri, Jul 31, 2020 at 5:27 PM Jeff Morriss <jeff.morriss.ws@xxxxxxxxx> wrote:

On Fri, Jul 31, 2020 at 8:58 AM Michael Poroger <bezenchu@xxxxxxxxx> wrote:

Hello users :)

I've successfully created a dissector which combines data from 2 UDP packets. Every time I select this kind of packet, I'm getting an error on the packet details on the custom protocol section.

Only when I select the previous packet and then the current packet, I can see the dissection as I expect and without any error.

How to solve the issue?

Probably a question better for the -dev list but...

Are you using epan's reassembly routines or something you built yourself?  If it's something you built yourself, are you storing the reassembled data in persistent storage which is available when (re)dissecting the 2nd frame (where the reassembled data is used)?

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    https://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe