Ask Your Question

Revision history [back]

wireshark dissect message again when I click the message

When I load a pcap file in wireshark, it will dissect messages one by one and show in GUI. But if I click one message in UI, wireshark will dissect it again. How to stop dissectting in the second time when I click message.

My scenario as below: dissect one message called message_type_A and store some information to variable "a" from this message, then in following messages if it is message_type_B, it will select different dissector for one segment in message_type_B according to the value in "a" then clean variable "a".

So after loading pcap file, it shows normal as it will dissect messages one by one. but when I click message_type_B in UI, it will dissect it again and as variable "a" is empty now, the segment in message_type_B will be not dissected again.

If I can stop the second dissectting, in my view, it will shows as expect. How to stio the second dissecting?

Thanks for your help in advance.

wireshark dissect message again when I click the message

When I load a pcap file in wireshark, it will dissect messages one by one and show in GUI. But if I click one message in UI, wireshark will dissect it again. How to stop dissectting in the second time when I click message.

My scenario as below: dissect one message called message_type_A and store some information to variable "a" from this message, then in following messages if it is message_type_B, it will select different dissector for one segment in message_type_B according to the value in "a" then clean variable "a".

So after loading pcap file, it shows normal as it will dissect messages one by one. but when I click message_type_B in UI, it will dissect it again and as variable "a" is empty now, the segment in message_type_B will be not dissected again.

If I can stop the second dissectting, in my view, it will shows as expect. How to stio stop the second dissecting?

Thanks for your help in advance.