This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Addition of new feature or module in WireShark

0

Can we add any new feature into wireshark? like; 1- Live graphical representation on run time, 2- To block any node after capturing malicious activity packets, IF yes, then can we use any language to add fearure, like python, lua, c# etc...

asked 03 Apr '17, 22:59

alihassanws's gravatar image

alihassanws
6112
accept rate: 0%


2 Answers:

0

You can develop any feature you like, it's FOSS for a reason. If you want to distribute Wireshark with your new features make sure to understand the GPL, you have to allow others to have the source code of your new features as well. If you want to have your features included into mainstream Wireshark, then your options are limited to what's described in the README files found in the source code repository and what the core developers decide they are willing to support. So in that case it would be wise to put forward your plans on the wireshark-dev mailing list first to discuss and get feedback on your plans.

answered 03 Apr '17, 23:42

Jaap's gravatar image

Jaap ♦
11.7k16101
accept rate: 14%

0

then can we use any language to add fearure, like python, lua, c# etc..

Wireshark is written mostly in C, with the Qt GUI code written in C++. It can be built with an embedded Lua interpreter; there are no other embedded languages.

So you can use C++ for the GUI code for features in the Qt UI, and C (or C++) for features in TShark, the GTK+ UI (now deprecated), or the Wireshark core (for use in both Wireshark and TShark). You can also use Lua; most versions of Wireshark are built with the embedded Lua interpreter (Lua 5.2 - we don't support Lua 5.3), so the feature should work in most versions of Wireshark on most platforms.

To use Python or C#, you would have to write your own code to allow that.

answered 04 Apr '17, 00:46

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k335196
accept rate: 19%