I'm trying to use Postdissector, but I found that postdissector may be triggered several times per packet captured. I tried the following code and it proved the fact. I'm a newbie to lua in wireshark and i'm not sure if there's something else needs to be done. Glad if anyone can help~
something in the debug window: 1321624108.557 1321624108.557(this is the 2nd occurence) 1321624108.5764 1321624108.5764(and this) asked 18 Nov ‘11, 05:53 forbidden |
One Answer:
The post-dissector is called for a packet each time it's dissected, and it goes through multiple passes of dissection, as Guy recently explained in another post. answered 18 Nov '11, 06:48 bstn |