This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

In the "Enabled Protocols" dialog some protocols have trees of sub-protocols. How is this organization defined, specifically when writing a protocol dissector in Lua?

For example, I have dissectors defined in this way in %APPDATA%\Wireshark\plugins:

  • myproto.lua: MyProto
  • myprotomsg1.lua: MyProtoMsg1
  • myprotomsg2.lua: MyProtoMsg2

MyProto adds itself in to wtap_encap in USER0 and creates a DissectorTable "myprotomsgs", and each subdissector adds itself to that table.

When I go to the Enabled Protocols dialog, I see:

  • MyProto
  • MyProtoMsg1
  • MyProtoMsg2

when I expect to see

  • MyProto
  •      MyProtoMsg1
  •      MyProtoMsg2

Is this possible using Lua?

asked 04 Feb '16, 13:34

mmaranski's gravatar image

mmaranski
6113
accept rate: 0%

edited 05 Feb '16, 08:09

Be the first one to answer this question!
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×431
×19

question asked: 04 Feb '16, 13:34

question was seen: 727 times

last updated: 05 Feb '16, 08:09

p​o​w​e​r​e​d by O​S​Q​A