This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Import from.. UDP port

I'm looking for similar feature than what is Wireshark - Import from text file.

But instead from text file I would like to send packets to IP/UDP port which wireshark then listens. Then the packet payload contains the information to be decoded by Wireshark.

This looks quite easy to implement functionality (for the great masters.., not for me) . Just specify port to listen and Encapsulation type.

Is this possible to implement example with Lua?

import

asked 11 Mar '13, 02:46

Trian Geo
1●1●1●2
accept rate: 0%

One Answer:

Such a feature is not implemented and if you like to see it in Wireshark, I suggest to file an enhancement bug at bugs.wireshark.org.

There are other ways to achieve a similar result.

use the remote capture feature of Wireshark and WinPcap
use ssh to forward the captured pcap data stream to Wireshark
use netcat to forward the captured pcap data stream to Wireshark via UDP

Is this possible to implement example with Lua?

With the embedded Lua in Wireshark: No
With a standalone Lua interpreter: Yes

Regards
Kurt

answered 11 Mar '13, 23:57

Kurt Knochner ♦
24.8k●10●39●237
accept rate: 15%