I searched and some says frame.packet_id is "a unique identifier that is assigned to each network packet". I tried to get it in my Lua dissector but the field always returned nil. The earlier Field.new() did not report error so I suppose frame.packet_id is a valid field name.
This is a reflection of an PCAPNG Enhanced Packet Block option which may or may not be present for the packet. Unless the capture engine adds this option in the capture file, it will not be there. Dumpcap, used by Wireshark, does not add this option.
Asked: 2022-12-10 17:03:16 +0000
Seen: 106 times
Last updated: Dec 10 '22
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.
