Ask Your Question

How to register LUA dissectors without GUI

asked 2017-12-20 23:00:45 +0000

VIPPERDEV gravatar image

updated 2017-12-20 23:36:20 +0000

Guy Harris gravatar image

So far, we need to use GUI to properly register a new custom dissector (DLT_USER table in Edit->Preferences). Instead of this, which files should I modify to make the same done without GUI? I've found dlt_users file in .../AppData/Roaming/Wireshark directory. However this is not the only place I should update because Wireshark doesn't use new dissector anyway.

edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted

answered 2017-12-21 14:11:38 +0000

cmaynard gravatar image

The correct name of the file is user_dlts, not dlt_users. I'm not sure if that's what you meant to write? This file is applicable per-profile though, so if you're running Wireshark using a different profile other than the Default profile, you'll have to update the per-profile file as well.

You could also launch Wireshark using the -o "uat:user_dlts:..." option, which should then work regardless of the profile. The Wireshark man page provides the following example:

If prefname is "uat", you can override settings in various user access tables using the form uat:uat filename:uat record. uat filename must be the name of a UAT file, e.g. userdlts. uatrecord must be in the form of a valid record for that file, including quotes. For instance, to specify a user DLT from the command line, you would use

-o "uat:user_dlts:\"User 0 (DLT=147)\",\"cops\",\"0\",\"\",\"0\",\"\""

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower


Asked: 2017-12-20 23:00:45 +0000

Seen: 398 times

Last updated: Dec 21 '17