ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-dev: Re: [Wireshark-dev] Dissecting - access previous packet in TCPconversation

From: "news.gmane.com" <AndreasSander1@xxxxxxx>
Date: Tue, 23 Nov 2010 18:21:29 +0100
"Jon Andersen" <janderse@xxxxxxxxx> wrote in
message
news:<AANLkTikjGbYJW-JSOo6ZxEXxzaDf6mdOZ2VP341zvDOS@xxxxxxxxxxxxxx>...

> The protocol I am dissecting requires a bit of data from the previous
> packet
> in order to properly dissect the current one. Using per-packet data
> (p_get_proto_data(), etc) and per-conversation data (find_conversation())
> gets me part of the way there but not all the way. I can use per-packet
> data to store the data I need with the packet, but the problem is finding
> the previous packet when dissecting the current one.

Is dissect_pdus() what you want? Using this function, you don't need to 
care, if your message crosses the packt boundaries?

Andy.