This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Fileshark_pcap.lua not working with Wireshark 2.0.0

0

I am trying to get the Fileshark_pcap.lua example on the wiki page to parse a pcap recording. https://wiki.wireshark.org/Lua/Examples

My configuration: Windows 10, Wireshark 2.0.0 x64

I copied both the fileshark_pcap.lua and linktype.lua into my personal plugins folder. In the about dialog under the plugins tab I see both lua scripts listed. I also see the PCAPFILE protocol in the preferences.

When using the file open windows I do not have an option for "Fileshark", thus I am unable to load a pcap file with the lua plugin. I also tried from the command line with no success as well.

If anyone can point me in the right direction that would be appreciated.

Thanks

asked 19 Nov '15, 20:54

Rob%20B's gravatar image

Rob B
368813
accept rate: 0%


One Answer:

0

Works for me.

Are you setting the correct option for Fileshark Pcap? The droplist to set is not the "Files of type:" one, it's the second droplist that doesn't have a label in between the "Read Filter:" edit box and the "MAC name resolution" checkbox.

answered 20 Nov '15, 01:12

grahamb's gravatar image

grahamb ♦
19.8k330206
accept rate: 22%

edited 20 Nov '15, 06:34

That was it. Thanks.

(20 Nov '15, 05:30) Rob B