This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

I am trying to get the Fileshark_pcap.lua example on the wiki page to parse a pcap recording. https://wiki.wireshark.org/Lua/Examples

My configuration: Windows 10, Wireshark 2.0.0 x64

I copied both the fileshark_pcap.lua and linktype.lua into my personal plugins folder. In the about dialog under the plugins tab I see both lua scripts listed. I also see the PCAPFILE protocol in the preferences.

When using the file open windows I do not have an option for "Fileshark", thus I am unable to load a pcap file with the lua plugin. I also tried from the command line with no success as well.

If anyone can point me in the right direction that would be appreciated.

Thanks

asked 19 Nov '15, 20:54

Rob%20B's gravatar image

Rob B
368813
accept rate: 0%


Works for me.

Are you setting the correct option for Fileshark Pcap? The droplist to set is not the "Files of type:" one, it's the second droplist that doesn't have a label in between the "Read Filter:" edit box and the "MAC name resolution" checkbox.

permanent link

answered 20 Nov '15, 01:12

grahamb's gravatar image

grahamb ♦
19.8k330206
accept rate: 22%

edited 20 Nov '15, 06:34

That was it. Thanks.

(20 Nov '15, 05:30) Rob B
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×431
×91
×5

question asked: 19 Nov '15, 20:54

question was seen: 1,214 times

last updated: 20 Nov '15, 06:34

p​o​w​e​r​e​d by O​S​Q​A