I have a working script which runs on tshark on windows (processes PCAP files, gives valid output). On windows, both the GUI and tshark can run this script and give me valid output. GUI fails on mac but does properly process some pcaps on mac. On ubuntu the script fails both for GUI and command line. Does anyone know what the next best logical steps would be to troubleshoot this? I need my .lua script to work on ubuntu. asked 19 Feb '16, 17:01 testname0110 |
One Answer:
the newest version of wireshark does not fully support old plugins. That seems to be the issue. the version 2.0 is unstable. To fix the issue I used xterm to open old wireshark and that solved my problem (on mac at least) answered 19 Feb '16, 18:06 testname0110 |
What version of Wireshark is running on each platform? If they're not all the same version as the one running on Windows, that might be a clue as to what the problem may be.
Also, what exactly is the failure? On the Ubuntu system for example, does
Help -> About Wireshark
indicate that Wireshark was compiled with Lua 5.2 (or some other version)?Lastly, does the Ubuntu
init.lua
script havedisable_lua = true
? If so, you'll need to set it tofalse
.See also: https://www.wireshark.org/docs/wsdg_html_chunked/wsluarm.html
this was it. I actually thought of that right after I posted this (derp). it completely fixed the mac problem and now I am trying to fix the version for linux. Do you know how I can get 1.12.9 (wireshark version) for ubuntu? I can't seem to find the install package now.