leelli's profile - activity

I want to print some needed logs through lua, the code is as follows.

The result obtained when tshark executes is correct.

When I open redis.pcap with wireshark I get a result that is repeated many times.

I would like to understand the reason for this difference and how should I modify my code for wireshark to work correctly

thank you very much

windows tshark : tshark -X lua_Script:hello.lu -r redis.pcap

lu.log：

2 0.000299000
3 0.000019000
5 0.000442000

wireshark lu.log：

2 0.000299000
3 0.000019000
5 0.000442000
2 0.000299000
3 0.000019000
5 0.000442000
2 0.000299000
3 0.000019000
5 0.000442000
2 0.000299000
3 0.000019000
5 0.000442000

hello.lua:

 T_gre_proto = Proto("test_pro","Test ")    
      tcp_ack = Field.new("tcp.analysis.ack_rtt")
      frame_num = Field.new("frame.number")
      file = io.open("C:\\Program Files\\Wireshark\\lu.log", 'w')

 function T_gre_proto.dissector(buffer,pinfo,tree)
     if tcp_ack() then
      frame_v = frame_num().value
      ttcp_v = tcp_ack().value

       file:write(string.format("%s %s\n",frame_v,ttcp_v) )

       file:flush()  

      end

  end

  register_postdissector(T_gre_proto)

hi Chuckc I found that no matter where I write file:close(), it will report an error or write less data. Where should I

hi Chuckc I found that no matter where I write file:close(), it will report an error or write less data. Where should I

hi Chuckc I found that no matter where I write file:close(), it will report an error or write less data. Where should I

Problem solved, thank you very much for your guidance

thank you very much for your reply But I still don't understand how to solve it, can I modify the hello.lua to solve it

Is there any difference in the way tshark and wireshark execute lua? I want to print some needed logs through lua, the c

Is there any difference in the way tshark and wireshark execute lua? I want to print some needed logs through lua, the c

Is there any difference in the way tshark and wireshark execute lua? I want to print some needed logs through lua, the c

Dissector name can be obtained through Dissector.list(),One of the names is ip.Then you can obtained the ipv4 Dissector through Dissector.get("ip").

now I want to get the Dissector of GRE, but I don't know the name of the GRE Dissector

The output of Dissector.list() also has no name like GRE or Generic Routing Encapsulation

thank you very much

I already know: dissectortable:get_dissector(pattern)

How to get the dissector of GRE Dissector name can be obtained through Dissector.list(),One of the names is ip.Then you

How to get the dissector of GRE Dissector name can be obtained through Dissector.list(),One of the names is ip.Then you