This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

tshark support for LUA post-dissector

0

Does tshark support LUA post-dissectors?

I'm having problems getting a post-dissector that works fine with Wireshark to work with tshark. Before I get heavily into debugging the problem I just want to be sure that there is no fundamental problem with using a post-dissector with tshark.

asked 24 Jul '15, 14:28

PaulOfford's gravatar image

PaulOfford
131●28●32●37
accept rate: 11%

One Answer:

0

Yup.

If you can post your script, I can take a crack at finding the problem.

answered 24 Jul '15, 16:01

Hadriel's gravatar image

Hadriel
2.7k●2●9●39
accept rate: 18%

Hi Hadriel,

Thanks for the post. The script is a bit big (1500 lines) so I'll upload somewhere and add a link here but there may be a more fundamental problem.

I need to use the -2 option of tshark to force two scans, and this seems to cause problems. I'll make a separate post on this as this issue seems to have nothing to do with LUA.

Best regards...Paul

(26 Jul '15, 08:34) PaulOfford