Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] Get data from previous request packet in subsequent reply pa

From: Richard van der Hoff <rav@xxxxxxxxxxxxxx>
Date: Thu, 26 Aug 2010 14:37:03 +0100 (BST)
On Thu, 26 Aug 2010, Frank Lahm wrote:

2010/8/26 Frank Lahm <franklahm@xxxxxxxxxxxxxx>:
Hi list,

I'm trying to find a way to get at data from a previous request packet
in order to correctly dissect the current packet.

Frank,

I only skimmed your code, so it may be that you have this covered already, but do remember that your dissector will not always be called with the packets in sequential order. (It will be called with each packet in turn initially, but will then be called again for each packet the user clicks on). So if there's more than one request in the conversation, you need to make sure that you are cross-referencing to the right one when dissecting responses.

Cheers

Richard