This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hey,

I made a Dissector using LUA and I want to use an information that was available two packets before , is there a way to store data with the number of the frame to use later.

I heard that it is done using "conversations" but i never saw a working example so I can do the same, or is there some way other than storing data in a session , maybe a way to retrieve data in a previous packet.

Thanks alot

asked 13 Oct '17, 00:02

webtuto's gravatar image

webtuto
6223
accept rate: 0%

There are several questions dealing with this subject here. You can create Lua tables (arrays) indexed by frame.number field or by some other unique identifiers available in the packets of your interest. On top of the quite obvious requirement that these tables must not be local to the dissector function, you have to deal with the fact that a dissector is called several times for the same packet, and that only the very first pass is sequential.

(13 Oct '17, 12:52) sindy
Be the first one to answer this question!
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×1,620
×431
×10

question asked: 13 Oct '17, 00:02

question was seen: 621 times

last updated: 13 Oct '17, 12:52

p​o​w​e​r​e​d by O​S​Q​A