Ask Your Question
0

lua dissector not called

asked 2019-06-13 08:56:04 +0000

Harvey gravatar image

Hello I wrote a lua dissector, which displays correcly most of the frames. But for the frames marked as "(suspected) retransmission" , the dissector is not invoke... How can I correct this ?

edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted
0

answered 2019-06-13 13:31:16 +0000

Jaap gravatar image

Try disabling the TCP reassembly option.

edit flag offensive delete link more

Comments

1

There's also the "Do not call subdissectors for error packets" tcp preference.

grahamb gravatar imagegrahamb ( 2019-06-13 16:50:17 +0000 )edit

Disabling

Allow subdissector to reassemble TCP stream

works fine

Do not call subdissectors for error packets

makes no change. Thanks for your help.

Harvey gravatar imageHarvey ( 2019-06-14 11:05:09 +0000 )edit

In fact when I disable : Allow subdissector to reassemble TCP stream, the dissector shows correct data information when the packets contain an entire structure, but if there is only the beginning of a new structure it does not work, as it could not reassemble with the next packet.

Is there a way to have both :

  • reassembly of packet from dissector
  • correct display for "(suspected) retransmission" ?
Harvey gravatar imageHarvey ( 2019-06-18 06:56:46 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2019-06-13 08:56:04 +0000

Seen: 38 times

Last updated: 1 hour ago