Wireshark mailing list archives

Re: Wireshark Lua question.


From: Stig Bjørlykke <stig.bjorlykke () gmail com>
Date: Mon, 5 Oct 2009 22:50:53 +0200

On 5. okt. 2009, at 22.07, Morita, Bill wrote:

I am seeking help in how to access the source and destination IP  
from a
  TCP packet in a LUA dissector of a protocol that uses TCP for  
transport.

You can use two methods to fetch the IP address:

1. The value in the "Source" column can be fetched from pinfo.src.

2. The value in "ip.src" can be fetched using a Field:

   ip_src_f = Field.new("ip.src") ; must be registred outside the  
dissector

   if ip_src_f() then
     ip_src = ip_src_f().value
   end


When printing you have to use tostring(pinfo.src) or ip_src_f().label


-- 
Stig Bjørlykke


___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe


Current thread: