mest112's profile - activity

Thank you.

For example, as shown in the image below, if I have two UDP packets in different frames, frames 39 and 40, how would I go about dissecting them together? I need data from both packets. I assume I can't use reassembly, since reassembly is for split packets.

Would I need to use more then one dissector?

Yes, frames 39 to 44 each have MASP packets in them, and I would like to dissect 39 and 40, because only together can I

Apologies! I changed the image if that helps. At the moment, my protocol just simply takes in all packets from UDP port

Apologies! I changed the image if that helps. My protocol just simply takes in all packets from UDP port 10160, and chan

Can I dissect multiple packets without using reassembly? For example, as shown in the image below, if I have two UDP pac

Can I dissect multiple packets without using reassembly? For example, as shown in the image below, if I have two UDP pac

Multiple complete packets, which I don't know how to dissect in a single dissector.

Can I dissect multiple packets without using reassembly? For example, as shown in the image below, if I have two UDP pac

Oh no that's not it, I just set the text in the column to say "Message fragment" (for no reason really), these aren't ac

Oh no that's not it, I just set the text in the column to say "Message fragment" (for no reason really), these aren't ac

Can I dissect multiple packets without using reassembly? For example, as shown in the image below, if I have two UDP pac

Can I dissect multiple packets without using reassembly? For example, as shown in the image below, if I have two UDP pac

Can I dissect multiple packets without using reassembly? For example, as shown in the image below, if I have two UDP pac

Can I dissect multiple packets without using reassembly? For example, if I have two UDP packets (they are not split, and

I see, then how would I go about dissecting multiple packets in one dissector? Surely there must be a way to do this.

No, I'm not talking about multiple fragments in a single packet, I'm talking about entirely separate packets.

It's for a project, if it isn't possible to apply reassembly to packets that aren't split, then is there another way to

These packets are running over UDP. I'm still fairly new to wireshark, so I'm still not familiar with some terms, like "

These packets are running over UDP. I'm still fairly new to wireshark, so I'm still not familiar with some terms, like "

Is it possible to use reassembly on non-split packets? I need to dissect multiple packets, but they are not necessarily

How do I use the fragment_add_seq_check function in UDP packet reassembly? I'm writing a dissector which dissects multip

2.7 seems to be only for TCP, is there instructions for reassembly for UDP?

How do I dissect multiple packets? For example, if there is information I can obtain only by using data from 2 packets (

One more thing, how do I add text as an item?

Thank you.

For example, if I have the item:

VarData: Active (0x90)

How do I add details under this item? I would like to add some text under it. I use C to make my dissector.

Hello, I am a beginner in Wireshark and dissector building, right now I'm just trying to figure out how to fetch and display packet data. I use the following lines in my dissect function:

guint val;
val = tvb_get_guint8(tvb, 1);
proto_tree_add_uint(masp_tree, hf_masp_data, tvb, 1, 1, val);

Here is an image of the results:

Expected result: 0x00

Actual result: 0x60

Why does fetching the data start from the 43rd byte instead of the very 1st one? How do I resolve this issue?

Thanks