Wireshark mailing list archives
Volatile Read of Wireshark Frames
From: "FIXED-TERM Scholz Tobias (DC-IA/EAM6)" <fixed-term.Tobias.Scholz () boschrexroth de>
Date: Wed, 18 Feb 2015 09:46:58 +0000
Hi, at the moment I am improving an existing Wireshark dissector. For my improvement it is really necessary, that Wireshark processes the incoming frames in a row. This will be done perfectly, if I am starting a new capture. But for the case, that I am stopping my current capture and starting it at a later point new without rebooting Wireshark, the frames are processed in a arbitrary order. I can check this conduct, with an easy output message to the Debug Console: printf(" Frame %u\n ", pinfo->fd->num); (As far as I know, "pinfo->fd->num" returns the frame number of the current processed frame.) With this function, I was able to see, that Wireshark jumps between the incoming frames during a running capture. For Example one conduct: Frame 1 -230 processed in a row --> Jump to Frame 1 again --> Frame 1 -26 processed in a row --> Jump to Frame 64 --> Jump to Frame 1 again --> Jump to Frame 205 --> next frames have been processed in a row... I even didn't click on any frame. I just started and stopped the capture again. Therefore I wanted to ask, whether this behavior is known and a solution exists, or whether I can force Wireshark to strict process a special Frame with number "XYZ"? It would be nice, if someone could explain me this conduct of Wireshark, after starting the capture new without closing the program, so that maybe I am able to deal with that conduct on my own. If it helps to improve comprehension of my problem, I can create a screenshot and share it. Thanks in advance.
___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
Current thread:
- Volatile Read of Wireshark Frames FIXED-TERM Scholz Tobias (DC-IA/EAM6) (Feb 18)
- Re: Volatile Read of Wireshark Frames Anders Broman (Feb 18)
- Re: Volatile Read of Wireshark Frames FIXED-TERM Scholz Tobias (DC-IA/EAM6) (Feb 25)
- Re: Volatile Read of Wireshark Frames Jeff Morriss (Feb 25)
- Re: Volatile Read of Wireshark Frames FIXED-TERM Scholz Tobias (DC-IA/EAM6) (Feb 26)
- Re: Volatile Read of Wireshark Frames FIXED-TERM Scholz Tobias (DC-IA/EAM6) (Feb 25)
- Re: Volatile Read of Wireshark Frames Anders Broman (Feb 18)