Hi there!
I am using Wireshark Version 3.0.2 .
I created new protocol dissector and get the same error msg: proto_new there cannot be two protocols with the same name.
I tried with:
MQTTPROTO = Proto.new("mqtt_new", "MQ Telemetry Transport New")
and
MQTTPROTO = Proto("mqtt_new", "MQ Telemetry Transport New")
both options throw exception.
Where is this being called from?
if buffer(0,1):uint() == 0x1 then dofile([[path_to_lua_dissector_file]])
Because I think that is likely the source of your problem. Your "mqtt_new" dissector is already registered but here you seem to be explicitly loading it again. Don't do that.
Ho! That makes sense! so I should I call this file? The line appears in another protocol which works fine! (All the header is processed as expected, but when the it should load the new mqtt protocol there is an error)
Maybe something like this?
if buffer(0,1):uint() == 0x1 then
Dissector.get("mqtt_new"):call(tvb, pinfo, tree)
end
tvb is just the typical "testy virtual buffer" name. You need to create the actual tvb from your buffer, i.e., the part of the buffer that gets passed to your "mqtt_new" dissector.
Thank you very much! It works!!!
Comments
This works fine for me. Do you have more than one .lua file with the same "mqtt_new" name?
Any reason why you try to add a disssector to an old version?
@cmaynard I have a single file with this name. Maybe Wireshark use cheche somewhere? I reopen the app but no success
@hugo.vanderkooij I don't understand what do you mean by "add a dissector to an old version". What do you mean? I want that in case of specific code in the packet to process the rest of the packet with costumed MQTT protocol.
if buffer(0,1):uint() == 0x1 then dofile([[path_to_lua_dissector_file]])What I did wrong?
You're working with Wireshark 3.0.2, which went EOL last year (See https://gitlab.com/wireshark/wireshar...), so @hugo.vanderkooij is wondering why you're not working with a newer version of Wireshark such as 3.4.9, which is currently the latest stable version of Wireshark.