Wireshark mailing list archives

Re: lua decoder accessing info from layers above


From: Fulko Hew <fulko.hew () gmail com>
Date: Thu, 15 Oct 2020 22:35:06 -0400

On Mon, Oct 12, 2020 at 8:34 PM John Thacker <johnthacker () gmail com> wrote:


On Mon, Oct 12, 2020, 8:00 PM Fulko Hew <fulko.hew () gmail com> wrote:


I'm trying to update/improve someone else's decoder written in Lua.
It's for a simple UDP (and TCP) based protocol.
But I need to be able to get access to the upper layer
to be able to decode it easily.

Can someone provide an example of how to determine if the higher layer
was UDP or TCP?


If all you need to know is whether it was called from TCP or UDP, then a
typical approach is to create slightly different dissector functions, one
for TCP and one for UDP (they can then call a common function, setting a
parameter) and register the TCP dissector with TCP and the UDP dissector
with UDP.


That was my first alternativeb.com/wireshark/wireshark/-/wikis/protobuf
<https://gitlab.com/wireshark/wireshark/-/wikis/protobuf>

I liked this answer better, so I updated my dissector accordingly,
and it's shorter, cleaner, and more obvious.

-------------

Now the next question is:
Can I submit this Lua based dissector for inclusion in the Wireshark
project, or
should I rewrite it as a 'C' based dissector, and submit that?
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe

Current thread: