Re: LUA dissector - combine data from 2 UDP packets, display issue

[Michael Poroger <bezenchu () gmail com>]

Something I build by myself. The idea is similar to this
<https://osqa-ask.wireshark.org/questions/55621/lua-udp-reassembly>
implementation (in the answer) - just storing the data between packet X-1
to packet X.

Not sure about the actual implementation (as already on weekend), but I
think that this is not persistent storage, as if the data in the packet is
complete, the storage is set to an empty one. In any case, if packet X-1
does not contain complete data,  this data is available for packet X.

-----------------------------
Michael Poroger

"Science is not only knowledge, science is also to be dare"
Shimon Peres



On Fri, Jul 31, 2020 at 5:27 PM Jeff Morriss <jeff.morriss.ws () gmail com>
wrote:

> On Fri, Jul 31, 2020 at 8:58 AM Michael Poroger <bezenchu () gmail com>
> wrote:
>
> > Hello users :)
> >
> > I've successfully created a dissector which combines data from 2 UDP
> > packets. Every time I select this kind of packet, I'm getting an error on
> > the packet details on the custom protocol section.
> >
> > Only when I select the previous packet and then the current packet, I can
> > see the dissection as I expect and without any error.
> >
> > How to solve the issue?
> Probably a question better for the -dev list but...
>
> Are you using epan's reassembly routines or something you built yourself?
> If it's something you built yourself, are you storing the reassembled data
> in persistent storage which is available when (re)dissecting the 2nd frame
> (where the reassembled data is used)?
> ___________________________________________________________________________
> Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
> Archives:    https://www.wireshark.org/lists/wireshark-users
> Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-users
>              mailto:wireshark-users-request () wireshark org
> ?subject=unsubscribe
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    https://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe