This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hi,

I'm working with an Inner protocol (made up in the company I'm working), using the winpcap driver. Can I write a Lua disector to a winpcap protocol?
If so I'm not sure how, since I don't have a specific port/ address I can set the dissector to work on. Can you please advice if posible and how?

Thanks, Dana.

asked 21 Jul '16, 04:38

DanaR's gravatar image

DanaR
6112
accept rate: 0%

I'm not sure where the winpcap driver fits in here, that's for capturing traffic for all protocols, not dissecting them.

What protocol carries your protocol, i.e. does it run over tcp or udp or something else?

(21 Jul '16, 05:26) grahamb ♦

No. My protocol is not udp or TCP, it is an "made up" protocol using "wpcap.dll" . (not a very standart use of winpcap, but this is the case in here )

(21 Jul '16, 05:37) DanaR

I'll try to be more clear: In the company I'm working in a new protocol was writen from scratch, including the low level network layer . No address is actuly needed since two computers are talking using a direct cable. In order to send and recive packets we are using "wpcap.dll", pcap_open/ pcap_sendqueue_transmit and other interface options. I'm trying to undersant if I can create a LUA to such a protocol ? (Thanks :)

(21 Jul '16, 05:49) DanaR

Presumably you are using Ethernet though? What do you see when you capture this traffic?

(21 Jul '16, 06:38) grahamb ♦

What you're trying to say is that you are developing a raw Ethernet protocol, and use winpcap to get it on the wire. In that case it's not called a winpcap protocol but an Ethernet protocol. There are several: IPv4 may be the best known, but there are many more.

(21 Jul '16, 06:49) Jaap ♦
Be the first one to answer this question!
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×637
×431
×72

question asked: 21 Jul '16, 04:38

question was seen: 832 times

last updated: 21 Jul '16, 06:49

p​o​w​e​r​e​d by O​S​Q​A