Wireshark mailing list archives
Re: Dissector for stream data
From: Andreas <AndreasSander1 () gmx net>
Date: Sun, 25 Dec 2011 06:35:42 +0100
Am 24.12.2011 14:16, schrieb Andriy Beregovenko:
Wireshark passes all packets in order to the dissector, when the capture is loaded. After this the dissector will get the packets in arbitrary order.If I open dump, select frame, and push 'END' I move to end of dump. At this time all frames between first few frames and few last frames, not decoded, so I can't correct decode last frame. Question is: how I can walk through all frames that will be passed to dissector if we look frames one-by-one?
The dissector can distinguish between both calls (see PINFO_FD_VISITED macro) and build conversation information in the first phase.
Andy ___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
Current thread:
- Dissector for stream data Andriy Beregovenko (Dec 18)
- Re: Dissector for stream data Jaap Keuter (Dec 19)
- Re: Dissector for stream data Andriy Beregovenko (Dec 19)
- Re: Dissector for stream data Andriy Beregovenko (Dec 24)
- Re: Dissector for stream data Andreas (Dec 24)
- Re: Dissector for stream data Andriy Beregovenko (Dec 25)
- Re: Dissector for stream data Guy Harris (Dec 25)
- Re: Dissector for stream data Guy Harris (Dec 25)
- Re: Dissector for stream data Andriy Beregovenko (Dec 25)
- Re: Dissector for stream data Jaap Keuter (Dec 19)