Wireshark mailing list archives

Re: lua decoder accessing info from layers above


From: "Maynard, Chris via Wireshark-dev" <wireshark-dev () wireshark org>
Date: Wed, 14 Oct 2020 15:50:34 +0000

From: Wireshark-dev <wireshark-dev-bounces () wireshark org> On Behalf Of qiangxiong.huang
Sent: Wednesday, October 14, 2020 11:35 AM
To: Developer support list for Wireshark <wireshark-dev () wireshark org>
Subject: Re: [Wireshark-dev] lua decoder accessing info from layers above

The best way is to check the pinfo. port_type to get the current transport protocol type.  There is an example on 
this page: https://gitlab.com/wireshark/wireshark/-/wikis/protobuf


Indeed.  Thanks for pointing this out.  Although I'd say the Lua documentation about the port_type[1] is a bit lacking 
here.  One needs to look at address.h[2] to find out what the values mean.

(Still curious why "frame.protocols" doesn’t work though.)
- Chris
[1]: https://www.wireshark.org/docs/wsdg_html_chunked/lua_module_Pinfo.html
[2]: https://gitlab.com/wireshark/wireshark/-/blob/master/epan/address.h#L360











CONFIDENTIALITY NOTICE: This message is the property of International Game Technology PLC and/or its subsidiaries and 
may contain proprietary, confidential or trade secret information. This message is intended solely for the use of the 
addressee. If you are not the intended recipient and have received this message in error, please delete this message 
from your system. Any unauthorized reading, distribution, copying, or other use of this message or its attachments is 
strictly prohibited.
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe

Current thread: