First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
0

Can I protect a lua text script not to read?

  • retag add tags

Hi, All I have a lua script text file with the specific company proprietary protocol. Can I make the text file not to be read or opened by others? Do WIRESHARK LUA API has such function?

I will be appreciated for any comments. Thanks in advance,

EJ

EJ's avatar
1
EJ
asked 2019-05-15 13:24:50 +0000
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

1 Answer

1

To my knowledge such functionality is not available. And even if it is, it would be pretty easy to alter the Wireshark code to print out the Lua script after decrypting it to execute.

For your purpose a compiled C dissector would be a better way to go.

SYN-bit's avatar
18.5k
SYN-bit
answered 2019-05-15 18:02:59 +0000
edit flag offensive 0 remove flag delete link

Comments

Except that you need to keep in mind that a C dissector will need to be GPL-compatible which means you must provide the source code of the dissector to any user [of the dissector] who requests it.

I believe, but am not sure, that the same would apply to a Lua dissector.

JeffMorriss's avatar JeffMorriss (2019-05-15 18:28:02 +0000) edit

Good point @JeffMorriss, I forgot about the GPL.

The GPL does not apply to a C dissector Plugin (only to a built-in dissector), does it? I need to check, but the plugin API is enough "at arms length" to not have to licence it under the GPL. But that needs to be checked thoroughly before going the plugin route.

SYN-bit's avatar SYN-bit (2019-05-15 19:58:50 +0000) edit

We are using GPL, not LGPL. So the source code must be provided if requested, as indicated by Jeff.

Pascal Quantin's avatar Pascal Quantin (2019-05-15 21:19:29 +0000) edit

If I have a dissector for protocol it might be possible to reverse engineer it, with some time. So why keep it that confidential. There is not that big security gain, anymore. But if it is that confidential that I don't want this, then I would not give away my dissector to any other. Or did I miss something?

Christian_R's avatar Christian_R (2019-05-15 22:46:51 +0000) edit

Thank you for setting this straight Pascal.

SYN-bit's avatar SYN-bit (2019-05-16 03:50:33 +0000) edit
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer