wireshark-dev October 2010 archive
Main Archive Page > Month Archives  > wireshark-dev archives
wireshark-dev: [Wireshark-dev] Question regarding using Taps in

[Wireshark-dev] Question regarding using Taps in Lua

From: Holger Freyther <holger+ws_at_nospam>
Date: Thu Oct 21 2010 - 07:39:27 GMT
To: wireshark-dev@wireshark.org

Hi all,

I wrote a simple lua script[1] with the intention to split a trace based on
SCCP connections and then only keep the connections that have shown kind of a
problem. In general it is working fine but I have one problem. I am missing
SCCP packets in my trace. I wonder if the following might be an explanation.
What happens if there are multiple IP packets in one Ethernet frame? Will
tap:packet be called for each IP packet inside the frame or will I need to
iterate over the packets from within the tap:packet() call?

Can there be any explanation besides my code being wrong?


Sent via: Wireshark-dev mailing list <wireshark-dev@wireshark.org>
Archives: http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev