This is our old Q&A Site. Please post any new questions and answers at

Is it possible to force Wireshark to reload the decryption table from within Lua code? Or other automatic means triggered by code/script.

I'm writing a small script for debugging during development, in which I've gathered the required information in order to decrypt ISAKMP packets. The information is correct, and I currently copy/paste it straight into the table through the Wireshark GUI. As such, the next step would be to push it into the table from script/code and have Wireshark update it on the fly.

Preferably I would like to avoid having to save the capture and reopen it after editing the table and restarting Wireshark.

asked 28 Jul '15, 05:36

spoki0's gravatar image

accept rate: 0%

No, Lua can't do that right now - but it's a good enhancement request. Please submit an enhancement bug on

In terms of other "scripts": you may be able to set the key info through the command-line, because ultimately they're all just preferences, which can be set by using the "-o [prefname:value]" command-line switch for both wireshark and tshark. So then you can write a shell script to do so for you, though of course this means restarting wireshark/tshark each time you change the keys.

permanent link

answered 28 Jul '15, 06:33

Hadriel's gravatar image

accept rate: 18%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here



Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text]( "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:


question asked: 28 Jul '15, 05:36

question was seen: 1,827 times

last updated: 28 Jul '15, 06:33

p​o​w​e​r​e​d by O​S​Q​A