Ask Your Question

Revision history [back]

You should look at conversations and request\response tracking.

A conversation is a way to build up state from all the packets in the "conversation" and as each packet is dissected the dissector can add or read info from the conversation data structure, see README.dissector Sect 2.2.

Request\response tracking allows you to display useful information in the decode tree such as which requests are matched to which response and the response time for individual transactions, see README.request_response_tracking.