I am trying to get the Fileshark_pcap.lua example on the wiki page to parse a pcap recording. https://wiki.wireshark.org/Lua/Examples My configuration: Windows 10, Wireshark 2.0.0 x64 I copied both the fileshark_pcap.lua and linktype.lua into my personal plugins folder. In the about dialog under the plugins tab I see both lua scripts listed. I also see the PCAPFILE protocol in the preferences. When using the file open windows I do not have an option for "Fileshark", thus I am unable to load a pcap file with the lua plugin. I also tried from the command line with no success as well. If anyone can point me in the right direction that would be appreciated. Thanks asked 19 Nov '15, 20:54  Rob B |
One Answer:
Works for me. Are you setting the correct option for Fileshark Pcap? The droplist to set is not the "Files of type:" one, it's the second droplist that doesn't have a label in between the "Read Filter:" edit box and the "MAC name resolution" checkbox. answered 20 Nov '15, 01:12  grahamb ♦ edited 20 Nov '15, 06:34 |
That was it. Thanks.