Hello, I have a problem to reassemble data of my dissector in c. My protocols is above the Ethernet. The dissector is called with dissector_add_uint on a "ethertype" The protocol contains of a header and a payload area. An here comes the problem, the data can be split in more than one package. What I want is that I collect all the data and then send it to another dissector. Is this possible with customs dissectors? Thanks asked 19 Nov '13, 10:05  Gatherer |
One Answer:
Take a look at conversation interface. I had the same problem, you can find my post here: http://ask.wireshark.org/questions/23894/passing-data-between-packets-and-not-between-dissectors answered 20 Nov '13, 07:36  Afrim |
thanks .. that is what I was looking for