Wireshark-users: Re: [Wireshark-users] LUA dissector - combine data from 2 UDP packets, display i

From: Jeff Morriss <jeff.morriss.ws@xxxxxxxxx>
Date: Fri, 31 Jul 2020 10:26:09 -0400


On Fri, Jul 31, 2020 at 8:58 AM Michael Poroger <bezenchu@xxxxxxxxx> wrote:

Hello users :)

I've successfully created a dissector which combines data from 2 UDP packets. Every time I select this kind of packet, I'm getting an error on the packet details on the custom protocol section.

Only when I select the previous packet and then the current packet, I can see the dissection as I expect and without any error.

How to solve the issue?

Probably a question better for the -dev list but...

Are you using epan's reassembly routines or something you built yourself?  If it's something you built yourself, are you storing the reassembled data in persistent storage which is available when (re)dissecting the 2nd frame (where the reassembled data is used)?