Wireshark dissector help

117 views
Skip to first unread message

Evade Flow

unread,
Oct 18, 2014, 11:41:48 AM10/18/14
to tara...@googlegroups.com
Does anybody know how to make this Wireshark dissector for IPROTO work? I tried copying it to ~/.wireshark/plugins on my Ubuntu machine, and it does show up in Help -> About -> Plugins after that, but it doesn't decode packets when I select one and choose Decode As -> IPROTO. And I get this error if I try to manually load it (using dofile() via Tools -> Lua -> Evaluate):

    Lua: Error During execution of dialog callback:
    /home/mmes/.wireshark/plugins/iproto.lua:1: Field_get: A Field extractor must be defined before Taps or Dissectors get called


I'm not very familiar with Lua dissectors in Wireshark, so it's quite likely I'm doing something wrong. Can somebody give advice on how to get this—or any other—Wireshark dissector for IPROTO working?

Konstantin Osipov

unread,
Oct 19, 2014, 3:20:09 PM10/19/14
to tara...@googlegroups.com
* Evade Flow <evad...@gmail.com> [14/10/18 21:00]:
> Does anybody know how to make this Wireshark dissector for
> IPROTO
> <https://github.com/delamonpansie/octopus/blob/master/extra/wireshark/iproto.lua>
> work? I tried copying it to ~/.wireshark/plugins on my Ubuntu
> machine, and it *does* show up in *Help -> About -> Plugins*
> after that, but it doesn't decode packets when I select one and
> choose *Decode As -> IPROTO.* And I get this error if I try to
> manually load it (using dofile() via *Tools -> Lua ->
> Evaluate*):

I would dig in two directions:

- wireshark plugin format may have changed, and the dissector
wasn't updated
- you're looking at an old version of the plugin, and using
tarantool 1.6

--
http://tarantool.org - an efficient, extensible in-memory data store
Reply all
Reply to author
Forward
0 new messages