Ask Your Question

[Dissector] How to have a number of fields depending of the buffer?

asked 2023-07-11 13:43:31 +0000

ameu00 gravatar image

Hello everyone,

It's been days that I try to solve this "simple" problem, but I can't find any solution by my own :(

So here's the thing: the protocol I dissect can have a variable number of data fields, and I am trying to properly display all these data fields in ProtoFields in a sub-tree. Moreover, the name of each ProtoField should change depending on what's in the buffer.

The number of fields and the name of each of these fields is determined by reading the first characters contained in the buffer.

I tried the following solution to create a variable number of ProtoFields. It works, except that the displayed name of the ProtoFields can't be changed.

The concept of this script was to create plenty of ProtoFields and to use only the ones I need. But as I said just above, I can not change the name of the ProtoField, as it is declared before knowing its real name.

ExampleDecoder = Proto("exampledecoder", "Example decoder")

-- Create a table of ProtoFields, the protocol can contain a maximum of 74 fields
DataFieldsProto = {}
for i = 1, 74, 1 do
    DataFieldsProto[i] = ProtoField.string("exampledecoder.field" .. i, "Field number " .. i)
    table.insert(NmeaDecoder.fields, DataFieldsProto[i])

function ExampleDecoder.dissector(buffer, pinfo, tree)
    local subtree = tree:add(ExampleDecoder, buffer(), "Example decoder")

    -- These are my own functions. They do the job.
    local nbOfFields = GetNbOfFields(buffer())            -- integer value
    local namesOfFields = GetNamesOfFileds(buffer())      -- table of integers, but where to put these names???
    local valuesOfFields = GetValuesOfFields(buffer())    -- table of integers

    -- Dynamically displays the ProtoFields in the subtree
    for i = 1, nbOfFields, 1 do
        subtree:add(DataFieldsProto[i], valuesOfFields[i]))

local udp_table = DissectorTable.get("udp.port")
udp_table:add(8202, ExampleDecoder)

Would any of you have a solution? Even an idea would really be useful.

Thanks in advance!


edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted

answered 2023-07-11 15:15:30 +0000

cmaynard gravatar image

Maybe this (untested) change will help?

-- Dynamically displays the ProtoFields in the subtree
for i = 1, nbOfFields, 1 do
    subtree:add(DataFieldsProto[i], valuesOfFields[i])):set_text(namesOfFields[i] .. ": " .. valuesOfFields[i])
edit flag offensive delete link more


W O W that's exactly what I wanted to do! Thank you very much for your help! I mark this question as resolved.

ameu00 gravatar imageameu00 ( 2023-07-12 07:54:21 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower


Asked: 2023-07-11 13:43:31 +0000

Seen: 612 times

Last updated: Jul 11 '23