Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

(suspected) retransmission

Hello I wrote a lua dissector.

For the frames marked as "(suspected) retransmission" ,

  1. If Allow subdissector to reassemble TCP stream is enable, the dissector is not invoke.
  2. If Allow subdissector to reassemble TCP stream is disable, the dissector shows correct data information only when the packets contain an entire structure, but if there is only the beginning of a new structure it does not work, as it could not reassemble with the next packet.

Is there a way to have both :

  • reassembly of packet from dissector
  • correct display for "(suspected) retransmission" ?