Ask Your Question

Lua API: How to update ethernet type display name?

asked 2023-08-09 04:45:10 +0000

wireschark gravatar image

updated 2023-11-06 07:14:22 +0000

I'm trying to write a simple Lua dissector for VMware's Beacon protocol (ethertype 0x8922). For now I have:

local proto = Proto('vbeacon', 'vbeacon')

function proto.dissector(tvbuf, pinfo, tree)
    pinfo.cols.protocol =

    tree:add(proto, tvbuf(), 'Beacon')

DissectorTable.get('ethertype'):add(0x8922, proto)

In Wireshark the Beacon protocol is indeed recognized but Ethernet type is still Unknown. How can I update this Ethernet type?

Wireshark screenshot:


edit retag flag offensive close merge delete


Also note that these are not just used for Beacons, as per the description in the IEEE ether type filing.

Jaap gravatar imageJaap ( 2023-11-07 06:41:47 +0000 )edit

1 Answer

Sort by ยป oldest newest most voted

answered 2023-08-09 05:24:33 +0000

Jaap gravatar image

This name resolution is build into Wireshark itself, there's no API for that.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower


Asked: 2023-08-09 04:45:10 +0000

Seen: 104 times

Last updated: Nov 06 '23