Wireshark mailing list archives
How to get the reassembled pkt in a lua post-dissector?
From: xiaofeng <wasphin () gmail com>
Date: Sat, 8 Dec 2018 15:54:47 +0800
Hi, I am writing a lua post-dissector to get some fields from a HTTP+XML body. If I check ``http.content_type`` like this: ``` function proto.dissector(tvbuf, pktinfo, root) local content_type = http_content_type() if not content_type then return end if (tostring(content_type) ~= "text/xml") then return end -- blabla end ``` some times the ``tvbuf`` will only contains part of a reassembled http pkt. How or is there any way to get the reassembled http pkt directly? Or must I assemble the http pkt again? Any suggestions is appreciate. Thanks. Best regards, Xiaofeng -- xiaofeng -- gpg key fingerprint: 2048R/5E63005B C84F 671F 70B7 7330 4726 5EC8 02BC CBA2 5E63 005B -- trans-zh_cn mailing list trans-zh_cn () lists fedoraproject org https://admin.fedoraproject.org/mailman/listinfo/trans-zh_cn ___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: https://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
Current thread:
- How to get the reassembled pkt in a lua post-dissector? xiaofeng (Dec 07)