decode protobuf within a protobuf in lua plugin

ranjeetsih
1 ●1 ●4 ●6

I have a http2 packet with grpc+protobuf content.

The protobuf inside grpc has a byte array field which itself is a protobuf.

I have written a lua post-dissector which find offset and length of this byte array and calls protobuf dissector on it as follows:

        pinfo.private["pb_msg_type"] = "message," .. probmsgtype
        Dissector.get("protobuf"):call(tvb, pinfo, subtree)

i am seeing following error: Protocol Buffers: pbuf.pbufmsgtype [Packet size limited during capture: ProtoBuf truncated]

I verified that length of buffer and content is alright.

i doubt some field in http2 header messing it up.

Any ideas?

1 Answer

Sort by » oldest newest most voted

ranjeetsih
1 ●1 ●4 ●6

if protbuf inside protobuf is stored as byte then following will work.

local pbuf_dissector_table = DissectorTable.get("protobuf_field")
pbuf_dissector_table:add(<fullpathofbyteprotobuffield>,newprotodissector)

then in the new chained dissector do following:

pinfo.private["pb_msg_type"] = "message," .. <actulatypeofnestedprotobuf> 
Dissector.get("protobuf"):call(tvb, pinfo, subtree)

Please start posting anonymously - your entry will be published after you log in or create a new account.

1 follower

Asked: 2021-02-01 09:48:31 +0000

Seen: 648 times

Last updated: Mar 13 '21