First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
Ask Your Question
0

mark part of packet as higher level protocol

I think this should be pretty simple but I just cannot find the right words to describe it to Google.

I have a protocol for which I am writing a dissector in Lua. My packets consist of header and payload. I can mark some part of my header as int (eg. payload length) or flags (eg. type of message). As for the payload I would need to mark it as a given protocol that already has dissector in Wireshark (in my example TLS or more specifically Record Protocol format). How do I do that?

grobelny's avatar
1
grobelny
asked 2019-11-05 21:15:04 +0000
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

1 Answer

0

Basically you create a subset of the TVB, with the payload data, and hand that to the dissector which can dissect that payload. In order to do so you have to get the handle of this dissector fist.

PS: not a Lua programmer, but this is the gist of it.

Jaap's avatar
13.7k
Jaap
answered 2019-11-06 10:20:05 +0000
edit flag offensive 0 remove flag delete link
more

Comments

add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer