Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

Is there a way to change the Packet Info Field based on criteria?

Looking to see if there is a possibility to change the text in the Info field based on a packet criteria. For example, if ssl.handshake.type == 1 then then change the packet info field to <custom text="">, or even the comment field.

Is there a way to change the Packet Info Field based on criteria?

Looking to see if there is a possibility to change the text in the Info field based on a packet criteria. For example, if ssl.handshake.type == 1 then then change the packet info field to <custom text="">, or even the comment field.

I have tried the following with Lua, but no soup:

function changeInfo(name) if pinfo.cols.info == "Client Hello" then pinfo.cols.info:set("<message>") end if ssl.handshake.type == 1 then pinfo.cols['info'] = "<message>" end if ssl.handshake.type == 2 then pinfo.cols.info = "<message>" end end

Is there a way to change the Packet Info Field based on criteria?

Looking to see if there is a possibility to change the text in the Info field based on a packet criteria. For example, if ssl.handshake.type == 1 then then change the packet info field to <custom text="">, or even the comment field.

I have tried the following with Lua, but no soup:

function changeInfo(name) if pinfo.cols.info == "Client Hello" then pinfo.cols.info:set("<message>") end if ssl.handshake.type == 1 then pinfo.cols['info'] = "<message>" end if ssl.handshake.type == 2 then pinfo.cols.info = "<message>" end end

Have also tried

pinfo.cols.info:set('stuff') pinfo.cols.info:fence()

Is there a way to change the Packet Info Field based on criteria?

Looking to see if there is a possibility to change the text in the Info field based on a packet criteria. For example, if ssl.handshake.type == 1 1 then then change the packet info field to <custom text="">, text>, or even the comment field.

I have tried the following with Lua, but no soup:

function changeInfo(name)
    if pinfo.cols.info == "Client Hello" then
        pinfo.cols.info:set("<message>")
    end
    if ssl.handshake.type == 1 then
        pinfo.cols['info'] = "<message>"
    end
    if ssl.handshake.type == 2 then
        pinfo.cols.info = "<message>"
    end
end

end

Have also tried

pinfo.cols.info:set('stuff')
pinfo.cols.info:fence()

pinfo.cols.info:fence()