Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 9896] Lua dissector tcp packet reassemble not working on W

Date: Wed, 19 Mar 2014 18:20:26 +0000

Comment # 6 on bug 9896 from
Also, I don't believe returning the missing number of bytes does anything.
See bug 9851.

Just setting the pinfo.desegment_offset and pinfo.desegment_len appropriately
is all you can do.

Your script looks a little odd because it tries to do a partial dissection -
i.e., it tries to pick up where it left off last time, instead of starting from
buffer offset 0 each time, and just setting desegment_len to what more it
needs.

from README.developer:
If the dissector discovers that the end of the tvbuff does /not/ coincide with
the end of a PDU, (ie, there is half of a PDU at the end of the tvbuff), it can
indicate this to the parent dissector, by updating the pinfo struct. The
desegment_offset field is the offset in the tvbuff at which the dissector will
continue processing when next called.  The desegment_len field should contain
the estimated number of additional bytes required for completing the PDU.  Next
time your dissect_PROTO is called, it will be passed a tvbuff composed of the
end of the data from the previous tvbuff together with desegment_len more
bytes.


You are receiving this mail because:
  • You are watching all bug changes.