Wireshark mailing list archives

Re: Lua: detect capture filename and end of captur


From: Tony Trinh <tony19 () gmail com>
Date: Thu, 29 Sep 2011 03:21:45 -0400

No, neither is possible from Wireshark Lua, but you don't need to know any
of that if you're just interested in collecting statistics for a particular
capture file.

tshark (with awk) might be the better solution in this case. See the *-z
parameter* in the man-page for tshark:
http://www.wireshark.org/docs/man-pages/tshark.html

But if you really want to use Lua, you can run a Lua tap on a capture file
(from tshark).


On Thu, Sep 29, 2011 at 3:00 AM, <j.kalsbach () jk-itberatung de> wrote:



Hi all,

I have two short questions concerning lua scripting for wireshark:

1) Is it possible to detect the name of the capture file currently read
from within lua?
2) Is it possible to detect the end of the capture from within lua?

The reasoning is quite simple: Want to do some custom statistics for the
whole file like "% of DNS requests in capture file" etc.

It's basically about functionality provided by the END block in awk.

Any help is appreciated.

Many thanks in advance,

BR,

Jörg

______________________________**______________________________**
_______________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org**

Archives:    http://www.wireshark.org/**lists/wireshark-users<http://www.wireshark.org/lists/wireshark-users>
Unsubscribe: 
https://wireshark.org/mailman/**options/wireshark-users<https://wireshark.org/mailman/options/wireshark-users>
           mailto:wireshark-users-**request () wireshark org<wireshark-users-request () wireshark org>
?subject=**unsubscribe
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe

Current thread: