In my custom dissector i'm having the problem that my dissector isbeing executed on ICMP packages aswell as UDP. In ICMP packages the data is incomplete so the lua script crashes. To avoid running it on ICMP packages I tried comparing the current protocol to UDP but that crashes Wireshark. I'm not sure if that is the best way of doing it so I'm open to any other suggestion
Wireshark Version 2.0.2 (v2.0.2-0-ga16e22e from master-2.0) Windows 7 asked 25 Mar ‘16, 06:04 RedX2501 edited 26 Mar ‘16, 00:39 |
2 Answers:
It should not be possible to cause Wireshark itself to crash merely by using a Lua script, so this is a bug. Please file a bug on this on the Wireshark Bugzilla; please attach your Lua script to the bug. answered 25 Mar '16, 15:00 Guy Harris ♦♦ |
I'm not good with Lua, but the C equivalent to what you want is: pinfo->ptype == PT_UDP So it should be something like: pinfo.port_type == 3 (not sure if PT_ enumeration is accessible in Lua) answered 03 May '16, 14:52 Michael Mann |
Are you able to reproduce this? If so would you mind filling the bug? I don't want to create another account for this....